Controllerless Networks

We are using Aruba 105's in a school enviroment. We have a flat network no VLANs. We are using roles to restrict where a student can get on our network when they are using a device they brought from home. Currently they are allowed Http and Https. The Apple TV is hardwired into our network again Flat Network. Problem is we need the students to be able to connect to the apple tv from their iPads. I have opened every port I can find related to apple Bonjour service and the best I get is a connection that lasts aprox 30 sec.

If someone can point me in the right direction for how to setup to restrict my students by still have apple work it would be very much appreciated.

Oh I am running firmware 6.2.0.0-3.2.0.1_36989

Thanks In advance

does it work when you block NO ports?

Which ports did you open in the first place?

All that was open first was 80 443, 53, and DHCP

Then in an effort to get Aple TV working I have opened

TCP 123, TCP 3689, UDP 5353, TCP 7000, TCP 7001

These were are open to all dest

Sorry not port 7001 its 7100.

You might want to send a quick email to Apple to make sure you are not missing something like ipV6

I emailed apple and this was the response. I wasn't impressed.

"AirPrint and Apple TV use the Bonjour protocol to communicate. Its not port based. This may help"

They referred me to an Aruba document on AirGroup..

Thanks for your responses in the mean time.

I found another port in a AirPlay Protocol Document Port 49152. This appears to be the key

Ports I have open now are

TCP 49152

TCP 7000

TCP 123

TCP 3689

TCP 80

TCP 443

TCP 53

UDP 5353

Will update when I has been put to test. :)