Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

AirGroup and AP-groups

This thread has been viewed 2 times
  • 1.  AirGroup and AP-groups

    Posted Apr 14, 2015 11:48 AM

    Hi,

     

    I'm setting up a POC installation to segment AppleTVs based on location (AP-groups):

     

    • Single vlan
    • CPPM 6.5 EVAL
    • 1 Controller (BCMC optimization on VLAN, Drop BCMC in VAP-profile), FW policy: allowall)
    • 2 AP-Groups (APG-1, APG-2)
    • 2 AP's, one in each group (but physically located within 1 meter of each other)
    • AppleTV (wired) registered in Guest as shared device with APG-1 in "Shared Locations"

    However, when I connect to the AP in APG-2, I can still airplay to the AppleTV!?

     

    What am I missing?

     

    kind regards
    Mikael, Denmark
    C|EH, ACMX#340, ACDX #305, ACSP, CWSP, CWAP, CWDP, CCNA:Wireless



  • 2.  RE: AirGroup and AP-groups
    Best Answer

    EMPLOYEE
    Posted Apr 14, 2015 12:42 PM

    Hi Mikael,

     

    Did you disable bluetooth discovery on the AppleTV?

     

    Thanks,

    Zach



  • 3.  RE: AirGroup and AP-groups

    Posted Apr 14, 2015 02:27 PM

    Hi Zach,

     

    thanks for responding!

     

    I've tried turning Bluetooth off on the AppleTV as well as one the test-iPad (turned off AirDrop as well), but I am still able to see the appleTV even after a restart of the iPad:-(

     

    kind regards
    Mikael, Denmark
    C|EH, ACMX#340, ACDX #305, ACSP, CWSP, CWAP, CWDP, CCNA:Wireless



  • 4.  RE: AirGroup and AP-groups

    EMPLOYEE
    Posted Apr 14, 2015 03:24 PM

    Hi Mikael,

     

    If it isn't bluetooth discovery, then you will need to start looking at what the controller.

     

    Try these commands:

     

    show airgroup servers

    show airgroup users

    show airgroup cppm entries

     

    This will help determine if things are working or not. You should see the AppleTV as an Airgroup Server. You should see the ipad as an AirGroup User. The CPPM entries will show you the information being received from CPPM for registered AirGroup servers.

     

    Thanks,

     

    Zach



  • 5.  RE: AirGroup and AP-groups
    Best Answer

    Posted Apr 15, 2015 01:11 PM

    I found my mistake. During troubleshooting I must have turned off "AirGroup Location Discovery". After enabling it, everything worked fine:-) When roaming to the AP-Group that the AppleTV is located in, it became discoverable in a matter of seconds. However, after roaming back to the other AP-group, the AppleTV was still visible for a few hours due to mDNS caching.

     

    The bluetooth tip was very helpful too, thanks a lot for that!

     

    kind regards
    Mikael, Denmark
    C|EH, ACMX#340, ACDX #305, ACSP, CWSP, CWAP, CWDP, CCNA:Wireless



  • 6.  RE: AirGroup and AP-groups

    Posted Aug 07, 2019 08:08 AM

    Can you help in ACSP Certification..