Question: How do I manage iTunes sharing with ArubaOS?
Product and Software: This article applies to all Aruba controllers and ArubaOS 188.8.131.52 and later.
At the virtual AP (SSID) level, the Broadcast Filter All knob drops broadcasts and multicast. If you enable this knob, users will be unable to find each other's iTunes sessions, and most (if not all) sharing will stop. This knob blocks mDNS (Bonjour) and prevents discovery of iTunes libraries and any other Bonjour services. Before you enable this knob, make sure you do not have an application that depends on broadcast discovery of clients to function.
Another alternative is to block TCP port 3689. iTunes uses port 3689 for music sharing. Blocking 3689 allows the iTunes libraries to be discovered, but users are prevented from connecting to them.
Finally, if you are just worried about the impact on the network, you could experiment with setting the traffic priority of the TCP streams on 3689 to background or best effort.
We can detect but not contain an adhoc network that consists of Centrino components only. The reason is that Intel Centrino components have a bug in their driver that makes them insensitive to deauth frames sent by AMs and APs. Other chipsets do not exhibit the same behavior.