Wireless Access

Reply
Occasional Contributor I

Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Currently we are using a single vlan pool with default roles. We are not using clearpass. We want to phase in AirGroup so we can monitor the traffic and usage, but with a single vlan pool it seems that we would have to turn it on for all vlans for it to work correctly. Am I missing something in the AP or AP group settings?

Guru Elite

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Airgroup is used to selectively allow advertisements to users, or groups of users.  Airgroup built into  the controller allows you to determine who sees what based on VLAN or User Group.  Using ClearPass Policy Manager, you can get as granular as ap-group or specific AP if you wanted.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

But without ClearPass Policy Manager you cannot? Is that correct? We don't have clearpass and I've been told that I can turn it on by ap-group by our Aruba Engineer, but I don't think we can phase it in by ap-group with just the ArubaOS. 

Guru Elite

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Can we understand what you are trying to accomplish, first?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

We want to phase in Airgroup so we can monitor MDNS traffic. It would be easy to do if we had our vlans seperated, but we are using a single vlan pool. If we were to turn on airgroup per vlan in a phased in approach we wouldn't be able to manage people in a single building being able to hit Airgroup. If we could turn it on per ap-group we could phase airgroup in by building because our ap-groups are building based. With that being said we don't have clearpass or a role management design that would be applicable in this case.

 

I have been told that I can just turn it on for all vlans and performance won't be effected, but in regards to testing traffic it is a risky approach to just turn it on all over our campus. Hence the question of turning it on by ap-group or restriciting it to certain ap-groups.

Guru Elite

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

When you say monitor MDNS traffic, what do you mean?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Multicast traffic essentially. In relation to how this has been addressed in the previous environment it was a matter of turning on multicast between their vlans. From what I have heard described, Airgroup cuts a lot of that traffic out by identifying clients and servers so there really isn't much of an increase. Would you agree with that?

Guru Elite

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

The idea of Airgroup is two things:

Proxy multicast requests so that users across subnets can see devices advertising services
Allow the administrator to turn on drop broadcast and multicast on the virtual ap and still support multicast DNS across subnets.

The problem with multicast DNS is when it is seen in the air, not necessarily on the wire. If you turn on drop broadcast and multicast on the virtual ap AND turn on air group you should be fine.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Thanks for the input. We already have drop broadcast and multicast on the virtual APs. It is just a matter of turning Airgroup on for all vlans (single vlan pool) to allow it to work in any building between client-server. I have just been using all my resources to gain insight into when we turn on Airgroup.

Guru Elite

Re: Is there a way to turn on AirGroup per AP or AP group? Or is it only by vlan?

Well,

 

I hope I didn't just add to the confusion....



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: