Owners manual

263 | Services Aruba Instant 6.4.0.2-4.1 | User Guide
marked as disallowed are prevented from accessing the correspondingAirGroup service. You can create a list of
disallowed user roles and VLANs for all AirGroup services configured on the IAP. For example, If the AirPlay
service is selected, the edit links for the airplay disallowed roles and airplay disallowed vlans are displayed.
Similarly, if sharing service is selected, the edit links for the sharing disallowed roles and sharing disallowed
vlans are displayed.
l To select block user roles from accessing an AirGroup service, click the corresponding edit link and select the
user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user roles
configured in your IAP cluster.
l To select VLANs from allowing access to an AirGroup service, click the corresponding edit link and select the
VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs
configured in your IAP cluster.
9. ClearPass Settings— Use this section to configure the CPPM server, CoA server, and enforce ClearPass
registering.
l CPPM server 1— Indicates the ClearPass Policy Manager server information for AirGroup policy.
l Enforce ClearPass registering— When enabled, only devices registered with CPPM will be discovered by
Bonjour devices, based on the CPPM policy.
In the CLI
To configure AirGroup:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable [dlna-only| mdns-only]
(Instant AP)(airgroup)# cppm enforce-registration
(Instant AP)(airgroup)# cppm-server <server>
(Instant AP)(airgroup)# cppm-query-interval <interval>
(Instant AP)(airgroup)# disallow-vlan <vlan-ID>
(Instant AP)(airgroup)# enable-guest-multicast
(Instant AP)(airgroup)# multi-swarm
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable DLNA support:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable dlna-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable support for Bonjour services:
(Instant AP)(config)# airgroup
(Instant AP)(config)# enable mdns-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To configure AirGroup Service
(Instant AP)(config)# airgroupservice <airgroup-service>
(Instant AP)(airgroup-service)# id <airgroupservice-ID>
(Instant AP)(airgroup-service)# description <text>
(Instant AP)(airgroup-service)# disallow-role <role>
(Instant AP)(airgroup-service)# disallow-vlan <vlan-ID>
(Instant AP)(airgroup-service)# end
(Instant AP)# commit apply
To verify the AirGroup configuration status:
(Instant AP)# show airgroup status