Aruba IAP-335 User Manual page 289

7. Ensure that the required AirGroup services are selected. To add any service, click New and add. To allow all
services, select allowall. If a custom service is added, you can add a corresponding service ID by clicking
New under Service ID.
If an IAP is upgraded to the current release with the Bonjour check box enabled, ensure that the
corresponding Bonjour services are selected.
Instant supports the use of up to 6 custom services.
8. Based on the services configured, you can block any user roles from accessing an AirGroup service and
restrict the AirGroup servers connected to a specific set of VLANs from being discovered . The user roles and
VLANs marked as disallowed are prevented from accessing the corresponding AirGroup service. You can
create a list of disallowed user roles and VLANs for all AirGroup services configured on the IAP. For example,
If the AirPlay service is selected, the edit links for the airplay disallowed roles and airplay disallowed
vlans are displayed. Similarly, if sharing service is selected, the edit links for the sharing disallowed roles
and sharing disallowed vlans are displayed.
To block user roles from accessing an AirGroup service, click the corresponding edit link and select the
l
user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user
roles configured in your IAP cluster.
To block VLANs from allowing access to an AirGroup service, click the corresponding edit link and select
l
the VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs
configured in your IAP cluster.
9. ClearPass Settings—Use this section to configure the ClearPass Policy Manager server, CoA server, and
enforce ClearPass registering.
CPPM server 1—Indicates the ClearPass Policy Manager server information for AirGroup policy.
l
Enforce ClearPass registering—When enabled, only devices registered with ClearPass Policy Manager
l
will be discovered by Bonjour devices, based on the ClearPass Policy Manager policy.
In the CLI
To configure AirGroup:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable [dlna-only | mdns-only]
(Instant AP)(airgroup)# cppm enforce-registration
(Instant AP)(airgroup)# cppm-server <server>
(Instant AP)(airgroup)# cppm-query-interval <interval>
(Instant AP)(airgroup)# disallow-vlan <vlan-ID>
(Instant AP)(airgroup)# enable-guest-multicast
(Instant AP)(airgroup)# multi-swarm
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable DLNA support:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable dlna-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable support for Bonjour services:
(Instant AP)(config)# airgroup
(Instant AP)(config)# enable mdns-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To configure AirGroup services:
(Instant AP)(config)# airgroupservice <airgroup-service>
289 | Services Aruba Instant 6.5.0.0-4.3.0.0 | User Guide