Staycast solution with Aruba Instant
06-07-2019 01:00 AM
Have anyone work with sonifi staycast solution?
I have an hotel with Aruba Instant and Aruba switches and our customer decided to install staycast in the hotel.
Apparently from Wifi Networks perspective is not a big deal. One SSID for Chromecast and Wifi users keep connecting to their customers SSID network. Staycast server just need one interface into users network and one interface into VLAN for Chromecast SSID. Staycast server assing user chromecast based on a code printer on tv room.
From my understanding Airgroup is not needed here. I just need to allow multicast into customers SSID and all traffic to staycast customers interface.
However, I have tried everything that has occurred to me. I tried disabling multicast and broadcast filters in both network, allowing literally all traffic in both networks, disabling ids , disabling and enabling all kind of airgroups services, using different user devices.. Thing is that sometimes works, sometimes (most of the time) doesn't work.
Have anyone experience whit this solution? Any insight?
Thank you very much.
Re: Staycast solution with Aruba Instant
02-25-2020 01:20 PM
Enable Client Isolation
- Deny Inter User Bridging
- Deny Intra VLAN Traffic
On "Inter VLAN Traffic Whitelist" Configure the ChromeCast Proxy IP
Setup a Network-based Access Rules for the Wireless config:
Allow Any on server "gateway IP"
Allow Any on server "ChromeCast Proxy IP"
Deny Any to network "guest-network/mask"
Allow Any to all destinations
With these settings you should be able to only see the Gateway and ChromeCast Proxy, but still block all other devices on the network.
It is assumed that you have the ChromeCast Proxy in two networks. All ChromeCasts are connected to a hidden encrypted network that terminates on the ChromeCast proxy, and there is a second IP that is on the same subnet as the Guest WiFi (this is the whitelisted one).