Wireless Access

last person joined: 3 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

Staycast solution with Aruba Instant

  • 1.  Staycast solution with Aruba Instant

    Posted Jun 07, 2019 04:01 AM

    Hi everyone.

     

    Have anyone work with sonifi staycast solution?

     

    https://www.sonifi.com/staycast/

     

    I have an hotel with Aruba Instant and Aruba switches and our customer decided to install staycast in the hotel.

     

    Apparently from Wifi Networks perspective is not a big deal. One SSID for Chromecast and  Wifi users keep connecting to their customers SSID network. Staycast server just need one interface into users network and one interface into VLAN for Chromecast SSID. Staycast server assing user chromecast based on a code printer on tv room.

     

    staycast.png

    From my understanding Airgroup is not needed here. I just need to allow multicast into customers SSID and all traffic to staycast customers interface.

     

    However, I have tried everything that has occurred to me. I tried disabling multicast and broadcast filters in both network, allowing literally all traffic in both networks, disabling ids , disabling and enabling all kind of airgroups services, using different user devices.. Thing is that sometimes works, sometimes (most of the time) doesn't work.

     

    Have anyone experience whit this solution? Any insight?

     

    Thank you very much.

     



  • 2.  RE: Staycast solution with Aruba Instant

    Posted Feb 25, 2020 04:21 PM

    Disable AirGroup

    Enable Client Isolation

       - Deny Inter User Bridging

       - Deny Intra VLAN Traffic

    On "Inter VLAN Traffic Whitelist" Configure the ChromeCast Proxy IP

    Setup a Network-based Access Rules for the Wireless config:

    Allow Any on server "gateway IP"

    Allow Any on server "ChromeCast Proxy IP"

    Deny Any to network "guest-network/mask"

    Allow Any to all destinations

     

    With these settings you should be able to only see the Gateway and ChromeCast Proxy, but still block all other devices on the network.

     

    It is assumed that you have the ChromeCast Proxy in two networks. All ChromeCasts are connected to a hidden encrypted network that terminates on the ChromeCast proxy, and there is a second IP that is on the same subnet as the Guest WiFi (this is the whitelisted one).