Wireless Access

Reply
New Contributor
Posts: 3
Registered: ‎12-22-2008

Itunes Sharring

This is not a new subject “ITunes Sharing” but I’m looking for a way to address this problem. The goal is stop users from sharing ITunes on the Wi-Fi, this is a University environment and it has been discovered that a large part of Wi-Fi bandwidth is being used by this form of peer to peer. Any ideas I’m new to Aruba so everything is a learning experience.
Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Drop Broadcasts

John,

If you are running ArubaOS 3.3.2.9 or higher, at the Virtual-AP (think SSID) level, there is a knob to drop broadcasts and multicast (Broadcast Filter All). If you enable this, users will not be able to find each others itunes sessions, and it will stop a good deal of the sharing, if not all. Just make sure you don't have an application that depends on broadcast discovery of clients to function before enabling this.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee
Posts: 19
Registered: ‎04-27-2009

Re: Itunes Sharring

Another alternative is to block TCP port 3689. This is the port that iTunes uses for music sharing. The previous suggestion would block mDNS (aka Bonjour) and prevent discovery of iTunes libraries as well as any other Bonjour services. Blocking 3689 would allow the iTunes libraries to be discovered but would prevent users from connecting to them.
Finally, if you are just worried about the impact on the network you could experiment with setting the traffic priority of the TCP streams on 3689 to background or best effort.
Regular Contributor I
Posts: 179
Registered: ‎08-29-2008

Re: Itunes Sharring

If you are using AIS-Radius, make the Remote Access Policy require a domain computer account. this has fixed my IPhone problems. :p
Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Requires a domain account

John,

That is a really innovative way to make sure that users do not get non-domain devices on the network. Let's hope they're not smart enough to make their username "domain/username" :)


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I
Posts: 179
Registered: ‎08-29-2008

Re: Itunes Sharring

I'll have to look into that... I work with some serious hackers who've been crying that I won't let them use their Iphones. Thanks colin for the insight.
Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Enforce Machine Authentication

John,

The Aruba way would be to "Enforce Machine Authentication". It permit you to check whether or not a computer has passed "Machine Authentication" on your domain and apply the proper role based on the result. Look for "Enforce Machine Authentication" in the ArubaOS user guide.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: