Well, "make it like at home" would imply each student having their own SSID and vlan they could manage. I remember a long time ago some schools would do /31 subnets.
By default (or most recommended deployments of Aruba) you prevent client to client communication like others said. But you can create what Aruba calls it an Airgroup which allows client to client communication for Bonjour or mDNS for devices that get added to the Airgroup. You can create Airgroups which can only include devices registered under the same username or devices that are associated with a particular access point. When a student registers their device in a captive portal in Clearpass, you can enable Airgroup for the device and the username. Then any devices registered under the same username will belong to the same Airgroup. You can also add other usernames to give access. This is useful for example if a roommate wants to give control of the device to the other roommate. In a classroom or conference setting, you can register a device under an AP Airgroup, so any device that associates to that AP will be able to see the device, like an Apple TV for example. On Wed, Mar 4, 2020 at 11:23 AM Lee H Badman < [email protected]> wrote: > I wish all Enterprise vendors did this. Everything else feels like > gratuitous complexity for the sake of having more to license. If the goal > is "make it like at home" the notion of device registration smells funny. > Although I yield this is not a simple discussion. > ------------------------------ > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> on behalf of Paul Smith < > [email protected]> > *Sent:* Wednesday, March 4, 2020 10:35:57 AM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + > ClearPass > > > That’s exactly how our Aerohive private client groups work. One SSID > across residences. Students get a PPSK and all devices using that key can > talk to each other. Job done. > > > > Paul Smith > > Network Specialist (Wireless) > > University of Bristol > > IT Services > > 31 Great George St > > Bristol > > BS1 5QD > > > > I try to follow the University email charter – > > bristol.ac.uk/media-library/sites/hr/documents/wellbeing/email-charter.pdf > > > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> *On Behalf Of *Lee H Badman > *Sent:* 04 March 2020 15:31 > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + > ClearPass > > > > Just a quick aside on this: > > > > We are dealing with same questions for long term, but one thing that I > think gets lost in these “solutions”- students don’t register anything at > home. Would be awesome if a bazillion PPSKs were available on same SSID. > > > > Here kid, your SSID is THIS, your password is THIS. Go to it. Nothing more > needed and no one can see each other. All the casty stuff works with no > network tricks. > > > > That would be the Holy Grail, to me. > > > > > > *Lee Badman* | Network Architect (CWNE#200) > > Information Technology Services > (NDD Group) > 206 Machinery Hall > 120 Smith Drive > Syracuse, New York 13244 > > *t* 315.443.3003 * e* [email protected] *w* its.syr.edu > > *SYRACUSE UNIVERSITY* > syr.edu > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> *On Behalf Of *Craig D Rice > *Sent:* Wednesday, March 4, 2020 10:19 AM > *To:* [email protected] > *Subject:* [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass > > > > We are an Aruba shop and are evaluating AirGroup + ClearPass to provide > students a more home-like experience in their residence halls. That is, we > would like students to be able to register and see only their registered > devices. > > If a user registers a device in ClearPass, is that device visible to > non-registered devices (or devices registered to another user) -- even if > the devices are associated with the same AP? > > We have received conflicting answers from our Aruba SEs, account exec, and > TAC, so we are hoping to learn how to limit device visibility from others > who are using ClearPass. > > > > Thanks for your advice! > Craig > > -- > > > > *Craig D. Rice* > > Director of Enterprise Infrastructure | IT > > [image: St. Olaf College] > > *Office: *+1-507-786-3631 > > 1510 St. Olaf Avenue Northfield, MN 55057-1097 USA > > *stolaf.edu* > <http://stolaf.edu/> > > > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > -- °(((=((===°°°(((================================================ ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
