Security

This community is currently in a read-only state due to a maintenance window. For more info click here
Reply
Highlighted
Super Contributor I

Verifying AirGroup config

Hello,

 

AOS 8.6.0.5    MM with Cluster of 10

CPPM 6.8.5    Cluster of 4

 

We have set AirGroup up with CPPM, initially we disallowed all VLANs except our IoT VLAN, but today we removed one of our eduroam VLANs from the disallow list so that devices on eduroam could see the IoT devices.

 

This seemed to work, or at least now we can see an AppleTV on the IoT SSID from an iPhone on the eduroam VLAN. But unfortunately we can see multiple AppleTVs, registered by other users . The devices registered in Guest have AirGroup turned on, and are registered as 'Personal', so I was assuming we would only be able to see the AppleTV that was registered with the same username as the iphone.

 

I'm having trouble troubleshooting this - I'm not sure how to find out whether the controllers are attempting to apply the 'Personal' policy. I've tried "show airgroup cppm entries" on the MM, /md, and on individual MCs, but this shows no devices at all, I'm not sure if it should? Maybe it isn't getting AirGroup info from ClearPass?

 

I can see the AppleTVs when I run "show airgroup servers" in the /md hierarchy, that seems to be sane.

 

Can anyone help with some tips please?

 

Thanks,

 

Guy


Accepted Solutions
Super Contributor I

Re: Verifying AirGroup config

Just to update this with the 'solution' (in case anyone else makes the same mistake) - it turned out that we had accidentally turned off the 'AirGroup Authorization Service' when we were tidying up a while ago, turning this on again resolved the problem!

View solution in original post


All Replies
Highlighted
Guru Elite

Re: Verifying AirGroup config

If you have not, please open a technical support case in parallel.  There are quite a few places to be checked, both on the controller and in ClearPass to determine what you should be seeing.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Video Knowledge Base
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Highlighted
Super Contributor I

Re: Verifying AirGroup config

Ok thanks Colin, I'll do that

Super Contributor I

Re: Verifying AirGroup config

Just to update this with the 'solution' (in case anyone else makes the same mistake) - it turned out that we had accidentally turned off the 'AirGroup Authorization Service' when we were tidying up a while ago, turning this on again resolved the problem!

View solution in original post

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: