SlideShare uma empresa Scribd logo
1 de 55
Baixar para ler offline
Enabling AirPrint and AirPlay on your
Network
March, 2014
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
2 #AirheadsConf
Agenda
• Zeroconf Networking and Challenges
• Aruba Technology Solution
• Design, Build & Run
• AirGroup in Distributed Networks
• Scaling, Troubleshooting and Best Practices
• New AirGroup Enhancements
• Q & A
3
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Zeroconf Networking and Challenges
4
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Zeroconf: Overview
• What is Zero Configuration Networking?
• Apple Bonjour
• Description of Protocols
– IP Address Auto configuration
– Multicast DNS (name resolution without DNS)
– Service Discovery
• DLNA/UPnP
– Digital Living Network Alliance
– Universal Plug and Play
– Simple Services Discovery Protocol (SSDP)
5
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
mDNS
• Used by Apple’s Bonjour implementation of Zeroconf
• Absence of a DNS Server
– Perform DNS queries via IP Multicast
– Does not require any changes to the DNS Protocol (messages,
resource record types, etc.)
• Multicast DNS Queries
– Uses the destination address 224.0.0.251
– Destination port: UDP 5353
– When a machine receives a response to a query, other machines
on the network receive the response too and can add it to their own
caches for future use.
6
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
SSDP
• Used by DLNA’s UPnP
– Based on HTTPU
– Uses HTTP NOTIFY and M-SEARCH messages
• SSDP queries
– Uses the destination address 239.255.255.250
– Destination port: UDP 1900
• UPnP servers, renderers and control points
Overview
Function UPnP Bonjour
Discovery protocol SSDP mDNS
To advertise services HTTP NOTIFY mDNS response
To find services HTTP M-SEARCH mDNS query
7
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Bonjour in the Enterprise?
L2/L3
Aruba Mobility
Controller
SSID 2
(VLAN 10)
SSID 1
(VLAN 20)
Does not work across VLANs
Increased channel utilization
with multicast traffic
No filtering of services
8
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Aruba Technology Solution
9
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Bonjour in the Enterprise with
AirGroup
L2/L3
Aruba Mobility
Controller
SSID 2
(VLAN 10)
SSID 1
(VLAN 20)
Bonjour across VLANs
Reduced channel utilization
Services can be filtered
10
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Enabling Bonjour across VLANs
1. Everybody sees everything
• Enabling Bonjour across VLANs has opened up the Pandora's
box
2. Lack of Security
• Why would my personal device be visible to others?
• How do I assign a device to be a common resource?
• Why do I get need to know about a printer that is across the
campus?
AirGroup Benefits:
• Context aware access control
• Personalized AirGroup experience
• Ease of installation
11
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Aruba Mobility Controller/Instant
Intercepts queries and
builds cache table
Acts as a ‘proxy’ for user
requests, unicasts response
VLAN Bridging
Traffic optimization over the
air
Allow/Block services
globally
12
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Value Add with CPPM
Registration portal for end users to
register their personal devices (Apple TVs,
Printers)
Registration portal for network
administrators to register shared devices
(conference room Apple TVs, Printers)
Define a “personal AirGroup” by specifying
a list of users to share devices with.
Define role and location attributes for
shared devices.
Time fencing for shared devices
ClearPass
13
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Putting the pieces together..
AirGroup Solution Architecture
Network Core / Data Center
Aruba Mobility Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Mobility Access Switch
Instant 11n Access Point
Campus 11n Access Points
Mobility Access Switch
Mobility Controller
14
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 1: Interactive K12
Classroom with AirGroup
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Teacher
Students
1. Teachers share content using the Apple TV
2. Students can share & collaborate using the Apple TV
3. Users outside this classroom cannot use this Apple TV
15
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 2: Restricted Access
University Classroom with AirGroup
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Teacher
Students
1.Only Professors share content using the Apple TV
2. Students cannot use this Apple TV
3. Users outside this classroom cannot use this Apple TV
16
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 3: All Wireless Office
Conference Room with AirGroup
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Employee Guest
1. Employee has access to the conference room Apple TV
2. Employee shares the Apple TV with
guest for a limited duration
3. Guest is able to use Apple TV
17
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 4: Personal Device Access in
University Dorms
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Student 1Student 2
1. Only Student 1 can access his personal
printer and Apple TV
2. Student 2 cannot use Student 1’s
personal devices
3. Student 1 can share his devices with
Student 2
18
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 5: Common Device
Access in a Retail Store
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Employee 2Employee 1
Shopper 1. Employees can engage with visitors
using Apple TV and use print services
2. Visitors/Shoppers cannot use in-store
devices
19
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 6: Per-Building Access
in a Campus
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Users in the building can use services
within the building
Campus 1
Building 1
Campus 1
Building 2
Campus 1
Building 3
20
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Use Case 7: Per-Floor access in
a Hospital
Network Core / Data Center
Aruba Mobility
Controller
Aruba ClearPass
Policy Manager
Other operations
systems
Aruba AirWave
Network Manager
Only doctors and nurses in ER get access
to services
Floor 3 – General
Patient Care
Floor 1 – ER
Doctors, nurses & patients on level 3 get
access to services
21
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Design, Build & Run
22
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Deployment Model
• Supported AirGroup deployment models
• Overlay model not supported
Single controller Multiple Controllers
AirGroup Domain 1 AirGroup Domain 2
IAP Multiple IAP Clusters
AirGroup Domain 1 AirGroup Domain 2
AirGroup Deployment
23
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Deployment Model
1. The same mobility controller that
terminates all APs and provides
WLAN access runs AirGroup
functionality too.
2. Trunk the VLANs, where wired
devices like printers are connected,
to the AirGroup controller.
3. Can operate with or without Clear
Pass Policy Manager.
24
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Clusters and Domains
25
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
User Device Registration Portal
with ClearPass
User logs in using the AD
credentials
Device View from a user/admin
perspective
AP Mobility Controller ClearPass
(Guest & PM)
CPPM helps in providing a filtered mDNS response to users and reduce noise.
26
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Personal Device Registration
What is the name of the Device?
What is the MAC of the Device?
Who else can use my “personal device”?
-username
Logged in as “Student 1”
27
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Common Device Registration based
on User Name, Role or Location
Logged in as “Network Admin”
Who can use the device form – “location context”?
- AP name, AP mac, AP-Group
Which users can see the device– “shared with”?
- usernames
Which user group can see the device – “user role”?
- User role
28
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Operation – Location
Based Device Sharing
AirGroup servers can be shared based on the following
location attributes:
1. AP Name
2. AP Group
3. AP FQLN
29
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Operation – Location
Based Device Sharing
1. Based on AP Name
Building
Floor 1
AP2
AP1
2. Based on ARM, AP2 is
an RF neighbor
1. On ClearPass registration portal,
share the AirGroup printer with AP1
3. iPhone associated to AP2 can now
see AirGroup printer associated to AP1
30
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Operation – Location
Based Device Sharing
2. Based on AP Group
Campus
Building 2
Building 4
Building 3
Building 1
AP Group 1
AP Group 4
AP Group 3
AP Group 2
AirGroup
services
restricted to
each building
31
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Operation – Location
Based Device Sharing
3. Based on AP FQLN
FQLN = <ap-name>.<floor>.<building>.<campus>
AP1
Building
Floor 1
AP1
AP1
Building
Floor 2
Building
Floor 3
FQLN = AP1.Floor 2.1344.Aruba
FQLN = AP1.Floor 3.1344.Aruba
FQLN = AP1.Floor 1.1344.Aruba
Apple TV associated
to AP1
4. iPhone on
Floor 2 is
associated to
AP1 on Floor 3
1. On ClearPass registration portal, share
Apple TV with FQLN = AP1.Floor 2.1344.Aruba
2. Users associated to
AP1 on Floor 1 can see
the Apple TV
3. Users associated to AP1 on Floor 3
can see the Apple TV
AP2
FQLN = AP2.Floor 2.1344.Aruba
32
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Controller Configuration
Require CPPM Device Registration
AirGroup Enabled
CPPM Server
AirGroup CoA
Update
33
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup ClearPass
Configuration..
CoA Update Port
must match!
34
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
..AirGroup ClearPass
Configuration
ClearPass reads the
controller configuration
35
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup ClearPass
Configuration
Controller Information used for AirGroup DeviceRegistration
36
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup in Distributed Networks
37
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Single IAP Cluster
mDNS packet
(AirPrint service) mDNS packet
(AirPlay service)
Database
P1 Air Print
TV1 Air Play
mDNS, AirPlay service
multicast query
mDNS, TV1 service
unicast response
LAN
AirPrint printer (P1)
SSID: VLAN1 SSID: VLAN2
Apple TV (TV1)
IAP 1 IAP 3IAP 2
Database
P1 Air Print
TV1 Air Play
Database
P1 Air Print
TV1 Air Play
ROLE: VLAN2
SSID: VLAN3
38
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Single IAP cluster with CPPM Server
mDNS packet
(AirPrint
service) mDNS packet
(AirPlay service)
LAN
AirPrint printer (P1)
SSID: VLAN1
SSID: VLAN2
Username: X
Servers discovered:
P1 and TV1
Apple TV (TV1)
IAP 1 IAP 3IAP 2
SSID: VLAN3
CPPM
Policy Enforcement
P1 is shared with X and Y
TV1 is shared with X
SSID: VLAN2
Username: Y
Servers discovered: P1
39
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Multiple IAP Clusters
Database sync every 2 minutes
Swarm 1 Servers
P1 AirPrint
TV1 AirPlay
Swarm 2 Servers
P2 AirPrint
TV2 AirPlay
Swarm 1 Servers
P1 AirPrint
TV1 AirPlay
Swarm 2 Servers
P2 AirPrint
TV2 AirPlay
VC VC
IAP 1 IAP 3IAP 2 IAP 4 IAP 6IAP 5
Router
AirPrint printer (P1)
SSID: VLAN1
Apple TV (TV1)
SSID: VLAN3
SSID: VLAN2
AirPrint printer (P2)
SSID: VLAN4
Apple TV (TV2)
SSID: VLAN6
SSID: VLAN5
40
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup UI
• Navigate to Settings -> Advanced settings -> AirGroup
41
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
CPPM Server Configuration
AirGroup CoA port – This can’t be standard
CoA port as it is used by Auth/STM server
already.
CoA only – This server is only to get
CoA packet, this server wouldn’t be
used for MAC-Authorization.
43
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Three ways to discover wired AirGroup servers:
1. Trunk all VLANs to the AirGroup controller
2. Configure a Tunneled Node between MAS and
AirGroup controller.
3. Configure an L2 GRE tunnel and redirect mDNS packets
across the tunnel.
AirGroup on 3rd party switches:
• Trunk VLANs to the AirGroup controller
AirGroup on the Mobility Access
Switch
44
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Scaling, Troubleshooting and Best Practices
45
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
Impact of Broadcast Controls on
AirGroup
Two broadcast control knobs:
• Broadcast-Multicast (BCMC) Optimization: VLAN
specific
• Broadcast-filter-all: VAP specific
– When AirGroup is enabled, mDNS exceptions are
automatically created to bypass above knobs.
– Enabling the above controls does not affect AirGroup
functionality.
46
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup Scalability Limits
• AOS 6.3/6.4 Platform limits:
• In an AirGroup domain, the total number of AirGroup users and servers is
bound by the platform limit of the top-end controller.
• Hard cap on the scaling limits
• Scaling limits were defined based on CPU and memory utilization on the
controller:
o
o (7210) # show airgroup internal-state statistics
AirGroup Server and User Limits in Controllers
3200X
M
3400 3600 M3 7210 7220 7240
# AirGroup servers 500 1000 2000 2000 2000 2000 2000
# AirGroup users 1500 3000 6000 6000 9000 12000 16000
mDNS Packet Rate Limits in Controllers
3200 3400 3600 M3 7210 7220 7240
mDNS packets
received per second
10 10 20 20 20 25 30
47
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
How to Measure AirGroup
Traffic..
• Before enabling AirGroup
1. If administrator is permitting AirGroup traffic
 !
ip access-list session mdns
any any udp 5353 permit
!
To see ACL hits:
(poc-campus-mc1) #show acl hits | include mdns
2. If administrator is denying AirGroup traffic
 !
ip access-list session mdns_deny
any any udp 5353 deny
!
 To see ACL hits:
(poc-campus-mc1) #show acl hits | include mdns_deny
48
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
..How to Measure AirGroup
Traffic
Steps to calculate the number of mDNS packets hitting
the controller:
1. Run the show acl hits command once (say at 10am) to reset
the New Hits counter. Note the time.
2. Run the command again after, say 15 mins, and note the number of
mDNS hits under New Hits. This gives the number of mDNS packets
seen in a duration of 15 minutes. (# of mDNS packets)/(15*60) gives
the rate of mDNS packets per second.
3. Repeat step2 after another 15 mins.
4. Run the test multiple times to average out the mDNS packet rate.
49
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup: Debugging and Logs
• AirGroup related debugging information is available under the
user, system and security debug logs.
• Use the following debug levels to collect debug information for
AirGroup:
• logging level debugging user process mdns
• logging level debugging system process mdns
• logging level debugging security process mdns
• Apart from the debug logs, collect the following command
outputs for debugging AirGroup issues:
• Show airgroup servers verbose
• Show airgroup users verbose
• Show airgroup cache entries
• Show airgroup internal-state statistics
• Collect tech-support logs from the AirGroup controller at
2 or 3 instances spaced about 5-10 minutes apart
50
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
General Best Practices..
• AirGroup in large deployments
o Enabling all AirGroup services consumes a large amount of system
resources
o Start by enabling select AirGroup services
o AirPrint, AirPlay and Chromecast services are enabled by default in AOS
6.4. For a new service to be allowed, create a custom AirGroup service.
o Start by restricting AirGroup services to most important VLANs
o Disable the allowall service
• When deploying wired AirGroup servers, make sure that the VLANs are
trunked all the way to the controller running AirGroup.
51
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
• Disable deny-inter-user firewall settings. These settings can
prevent clients from communicating each other.
• For large deployments, use CPPM to register the AirGroup servers
with location tag for better performance.
• If AirGroup is enabled on multiple controllers in a deployment that
share common VLANs, configure AirGroup domains and add the
controllers to the cluster.
..General Best Practices
52
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AirGroup: AP Forwarding Mode
• AirGroup is supported only on tunnel and de-tunnel forwarding modes
• AirGroup services may break if NATing is enabled on user VLANs
53
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
New AirGroup Enhancements
54
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
#AirheadsConf
AOS 6.4 AirGroup
Enhancements
• AirGroup support for DLNA-based devices
• Support for virtual mDNS device configuration
• CPPM Integration
• Ability to share AirGroup services based on logical groups
• Static time fencing
• UI dashboard enhancements
• AirWave support
• Coming soon
55
56
CONFIDENTIAL
© Copyright 2014. Aruba Networks, Inc.
All rights reserved
Thank You
#AirheadsConf

Mais conteúdo relacionado

Mais procurados

EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...
EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...
EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...Aruba, a Hewlett Packard Enterprise company
 
6 understanding aruba rf issues
6 understanding aruba rf issues6 understanding aruba rf issues
6 understanding aruba rf issuesVenudhanraj
 

Mais procurados (20)

Aruba 802.11n Networks Validated Reference Design
Aruba 802.11n Networks Validated Reference DesignAruba 802.11n Networks Validated Reference Design
Aruba 802.11n Networks Validated Reference Design
 
Outdoor network engineering_chuck lukaszewski
Outdoor network engineering_chuck lukaszewskiOutdoor network engineering_chuck lukaszewski
Outdoor network engineering_chuck lukaszewski
 
ClearPass design scenarios that solve the toughest security policy requirements
ClearPass design scenarios that solve the toughest security policy requirementsClearPass design scenarios that solve the toughest security policy requirements
ClearPass design scenarios that solve the toughest security policy requirements
 
Aruba instant iap setup rev3
Aruba instant iap setup rev3Aruba instant iap setup rev3
Aruba instant iap setup rev3
 
Clear pass policy manager advanced_ashwath murthy
Clear pass policy manager advanced_ashwath murthyClear pass policy manager advanced_ashwath murthy
Clear pass policy manager advanced_ashwath murthy
 
EMEA Airheads- ArubaOS - Rogue AP troubleshooting
EMEA Airheads- ArubaOS - Rogue AP troubleshootingEMEA Airheads- ArubaOS - Rogue AP troubleshooting
EMEA Airheads- ArubaOS - Rogue AP troubleshooting
 
EMEA Airheads How licensing works in Aruba OS 8.x
EMEA Airheads  How licensing works in Aruba OS 8.xEMEA Airheads  How licensing works in Aruba OS 8.x
EMEA Airheads How licensing works in Aruba OS 8.x
 
Campus Redundancy Models
Campus Redundancy ModelsCampus Redundancy Models
Campus Redundancy Models
 
EMEA Airheads_ Advance Aruba Central
EMEA Airheads_ Advance Aruba CentralEMEA Airheads_ Advance Aruba Central
EMEA Airheads_ Advance Aruba Central
 
Optimizing Aruba WLANs for Roaming Devices
Optimizing Aruba WLANs for Roaming DevicesOptimizing Aruba WLANs for Roaming Devices
Optimizing Aruba WLANs for Roaming Devices
 
EMEA Airheads- ArubaOS - Understanding Control-Plane-Security
EMEA Airheads-  ArubaOS - Understanding Control-Plane-SecurityEMEA Airheads-  ArubaOS - Understanding Control-Plane-Security
EMEA Airheads- ArubaOS - Understanding Control-Plane-Security
 
EMEA Airheads- ClearPass extensions and how they can help
EMEA Airheads-  ClearPass extensions and how they can helpEMEA Airheads-  ClearPass extensions and how they can help
EMEA Airheads- ClearPass extensions and how they can help
 
Aruba wireless and clear pass 6 integration guide v1.3
Aruba wireless and clear pass 6 integration guide v1.3Aruba wireless and clear pass 6 integration guide v1.3
Aruba wireless and clear pass 6 integration guide v1.3
 
EMEA Airheads- Aruba 8.x Architecture overview & UI Navigation
EMEA Airheads- Aruba 8.x Architecture overview & UI NavigationEMEA Airheads- Aruba 8.x Architecture overview & UI Navigation
EMEA Airheads- Aruba 8.x Architecture overview & UI Navigation
 
EMEA Airheads- Instant AP- Instant AP Best Practice Configuration
EMEA Airheads- Instant AP- Instant AP Best Practice ConfigurationEMEA Airheads- Instant AP- Instant AP Best Practice Configuration
EMEA Airheads- Instant AP- Instant AP Best Practice Configuration
 
EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...
EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...
EMEA Airheads- Aruba IAP Webinar – How AirGroup service works in Aruba Instan...
 
Roaming behavior and Client Troubleshooting
Roaming behavior and Client TroubleshootingRoaming behavior and Client Troubleshooting
Roaming behavior and Client Troubleshooting
 
6 understanding aruba rf issues
6 understanding aruba rf issues6 understanding aruba rf issues
6 understanding aruba rf issues
 
Virtual Intranet Access (VIA)
Virtual Intranet Access (VIA)Virtual Intranet Access (VIA)
Virtual Intranet Access (VIA)
 
Aruba Mobility Controller 7200 Installation Guide
Aruba Mobility Controller 7200 Installation GuideAruba Mobility Controller 7200 Installation Guide
Aruba Mobility Controller 7200 Installation Guide
 

Destaque

Apple tv + iPad = The digital Swiss Army knife UPDATED
Apple tv + iPad = The digital Swiss Army knife UPDATEDApple tv + iPad = The digital Swiss Army knife UPDATED
Apple tv + iPad = The digital Swiss Army knife UPDATEDJon Corippo
 
Apple TV at home and work
Apple TV at home and workApple TV at home and work
Apple TV at home and workRick Chin
 
Workshop: Cisco Mobility Express Solution: Simple by Design
Workshop: Cisco Mobility Express Solution: Simple by DesignWorkshop: Cisco Mobility Express Solution: Simple by Design
Workshop: Cisco Mobility Express Solution: Simple by DesignRobb Boyd
 
Варианты решений для подключения мобильных устройств
Варианты решений для подключения мобильных устройствВарианты решений для подключения мобильных устройств
Варианты решений для подключения мобильных устройствSkillFactory
 

Destaque (20)

Apple tv + iPad = The digital Swiss Army knife UPDATED
Apple tv + iPad = The digital Swiss Army knife UPDATEDApple tv + iPad = The digital Swiss Army knife UPDATED
Apple tv + iPad = The digital Swiss Army knife UPDATED
 
Apple TV at home and work
Apple TV at home and workApple TV at home and work
Apple TV at home and work
 
Workshop: Cisco Mobility Express Solution: Simple by Design
Workshop: Cisco Mobility Express Solution: Simple by DesignWorkshop: Cisco Mobility Express Solution: Simple by Design
Workshop: Cisco Mobility Express Solution: Simple by Design
 
Варианты решений для подключения мобильных устройств
Варианты решений для подключения мобильных устройствВарианты решений для подключения мобильных устройств
Варианты решений для подключения мобильных устройств
 
Deploying Microsoft Lync over Wi-Fi #AirheadsConf Italy
Deploying Microsoft Lync over Wi-Fi #AirheadsConf ItalyDeploying Microsoft Lync over Wi-Fi #AirheadsConf Italy
Deploying Microsoft Lync over Wi-Fi #AirheadsConf Italy
 
Advanced Aruba Mobility Access Switch Workshop #AirheadsConf Italy
Advanced Aruba Mobility Access Switch Workshop #AirheadsConf ItalyAdvanced Aruba Mobility Access Switch Workshop #AirheadsConf Italy
Advanced Aruba Mobility Access Switch Workshop #AirheadsConf Italy
 
Aruba Atmosphere / Airheads 2014 Keerti Melkote Keynote
Aruba Atmosphere / Airheads 2014 Keerti Melkote KeynoteAruba Atmosphere / Airheads 2014 Keerti Melkote Keynote
Aruba Atmosphere / Airheads 2014 Keerti Melkote Keynote
 
IDC Aruba Webinar - 3 Feb 15
IDC Aruba Webinar - 3 Feb 15IDC Aruba Webinar - 3 Feb 15
IDC Aruba Webinar - 3 Feb 15
 
Aruba Instant Workshop #AirheadsConf Italy
Aruba Instant Workshop #AirheadsConf ItalyAruba Instant Workshop #AirheadsConf Italy
Aruba Instant Workshop #AirheadsConf Italy
 
Customer Keynote - Microsoft Lync
Customer Keynote - Microsoft LyncCustomer Keynote - Microsoft Lync
Customer Keynote - Microsoft Lync
 
Breakout - Airheads Macau 2013 - WLAN Management & Troubleshooting with AirWave
Breakout - Airheads Macau 2013 - WLAN Management & Troubleshooting with AirWaveBreakout - Airheads Macau 2013 - WLAN Management & Troubleshooting with AirWave
Breakout - Airheads Macau 2013 - WLAN Management & Troubleshooting with AirWave
 
WLAN Design for Location, Voice & Video
WLAN Design for Location, Voice & VideoWLAN Design for Location, Voice & Video
WLAN Design for Location, Voice & Video
 
E Rate Modernization Overview
E Rate Modernization Overview E Rate Modernization Overview
E Rate Modernization Overview
 
Enabling the Virtual Enterprise
Enabling the Virtual EnterpriseEnabling the Virtual Enterprise
Enabling the Virtual Enterprise
 
Breakout - Airheads Macau 2013 - ClearPass Access Management Basics
Breakout - Airheads Macau 2013 - ClearPass Access Management Basics Breakout - Airheads Macau 2013 - ClearPass Access Management Basics
Breakout - Airheads Macau 2013 - ClearPass Access Management Basics
 
Remote & Branch Networking Fundamentals #AirheadsConf Italy
Remote & Branch Networking Fundamentals #AirheadsConf ItalyRemote & Branch Networking Fundamentals #AirheadsConf Italy
Remote & Branch Networking Fundamentals #AirheadsConf Italy
 
Shanghai Breakout: 802.11ac Wi-Fi Fundamentals
Shanghai Breakout: 802.11ac Wi-Fi FundamentalsShanghai Breakout: 802.11ac Wi-Fi Fundamentals
Shanghai Breakout: 802.11ac Wi-Fi Fundamentals
 
Meridian APPs and ALE at WFD6
Meridian APPs and ALE at WFD6Meridian APPs and ALE at WFD6
Meridian APPs and ALE at WFD6
 
Aruba Technical Webinar: Unplugging the Last Cord
Aruba Technical Webinar:  Unplugging the Last CordAruba Technical Webinar:  Unplugging the Last Cord
Aruba Technical Webinar: Unplugging the Last Cord
 
Make Your Own Meridian Mobile App Workshop #AirheadsConf Italy
Make Your Own Meridian Mobile App Workshop #AirheadsConf ItalyMake Your Own Meridian Mobile App Workshop #AirheadsConf Italy
Make Your Own Meridian Mobile App Workshop #AirheadsConf Italy
 

Semelhante a Enabling AirPrint & AirPlay on Your Network

ARUBA - Remote Branch-networking-fundamentals-2014
ARUBA - Remote Branch-networking-fundamentals-2014ARUBA - Remote Branch-networking-fundamentals-2014
ARUBA - Remote Branch-networking-fundamentals-2014Marcello Marchesini
 
Aruba utilities on mobile devices v30
Aruba utilities on mobile devices v30Aruba utilities on mobile devices v30
Aruba utilities on mobile devices v30Marcello Marchesini
 
aruba network
aruba networkaruba network
aruba networkLeo Thiha
 

Semelhante a Enabling AirPrint & AirPlay on Your Network (20)

Remote Wireless LANs
Remote Wireless LANsRemote Wireless LANs
Remote Wireless LANs
 
ARUBA - Remote Branch-networking-fundamentals-2014
ARUBA - Remote Branch-networking-fundamentals-2014ARUBA - Remote Branch-networking-fundamentals-2014
ARUBA - Remote Branch-networking-fundamentals-2014
 
Next generation remote networks aruba instant gokul rajagopalan
Next generation remote networks aruba instant gokul rajagopalanNext generation remote networks aruba instant gokul rajagopalan
Next generation remote networks aruba instant gokul rajagopalan
 
3 air wave practical workshop_mike bruno_matt sidhu
3 air wave practical workshop_mike bruno_matt sidhu3 air wave practical workshop_mike bruno_matt sidhu
3 air wave practical workshop_mike bruno_matt sidhu
 
Shanghai Breakout: Access Management with Aruba ClearPass
Shanghai Breakout: Access Management with Aruba ClearPassShanghai Breakout: Access Management with Aruba ClearPass
Shanghai Breakout: Access Management with Aruba ClearPass
 
Advanced Aruba ClearPass Workshop
Advanced Aruba ClearPass WorkshopAdvanced Aruba ClearPass Workshop
Advanced Aruba ClearPass Workshop
 
Building an aruba proof of concept lab javier urtubia
Building an aruba proof of concept lab javier urtubiaBuilding an aruba proof of concept lab javier urtubia
Building an aruba proof of concept lab javier urtubia
 
Real-world 802.1X Deployment Challenges
Real-world 802.1X Deployment ChallengesReal-world 802.1X Deployment Challenges
Real-world 802.1X Deployment Challenges
 
Access Management with Aruba ClearPass #AirheadsConf Italy
Access Management with Aruba ClearPass #AirheadsConf ItalyAccess Management with Aruba ClearPass #AirheadsConf Italy
Access Management with Aruba ClearPass #AirheadsConf Italy
 
Advanced Access Management with Aruba ClearPass #AirheadsConf Italy
Advanced Access Management with Aruba ClearPass #AirheadsConf ItalyAdvanced Access Management with Aruba ClearPass #AirheadsConf Italy
Advanced Access Management with Aruba ClearPass #AirheadsConf Italy
 
Breakout - Airheads Macau 2013 - Cloud WiFi
Breakout - Airheads Macau 2013 - Cloud WiFiBreakout - Airheads Macau 2013 - Cloud WiFi
Breakout - Airheads Macau 2013 - Cloud WiFi
 
Shanghai Keynote: Keerti Demos
Shanghai Keynote: Keerti DemosShanghai Keynote: Keerti Demos
Shanghai Keynote: Keerti Demos
 
2012 ah emea advanced mobility design
2012 ah emea   advanced mobility design2012 ah emea   advanced mobility design
2012 ah emea advanced mobility design
 
1 voice and video over wi fi-balajee krishnamurthy
1 voice and video over wi fi-balajee krishnamurthy1 voice and video over wi fi-balajee krishnamurthy
1 voice and video over wi fi-balajee krishnamurthy
 
Aruba utilities on mobile devices v30
Aruba utilities on mobile devices v30Aruba utilities on mobile devices v30
Aruba utilities on mobile devices v30
 
Secure Enterprise Mobility
Secure Enterprise MobilitySecure Enterprise Mobility
Secure Enterprise Mobility
 
Network Management with Aruba AirWave
Network Management with Aruba AirWaveNetwork Management with Aruba AirWave
Network Management with Aruba AirWave
 
aruba network
aruba networkaruba network
aruba network
 
Defining Advanced AAA Policies for Access Networks
Defining Advanced AAA Policies for Access NetworksDefining Advanced AAA Policies for Access Networks
Defining Advanced AAA Policies for Access Networks
 
Network Management with Aruba Airwave #AirheadsConf Italy
Network Management with Aruba Airwave #AirheadsConf ItalyNetwork Management with Aruba Airwave #AirheadsConf Italy
Network Management with Aruba Airwave #AirheadsConf Italy
 

Mais de Aruba, a Hewlett Packard Enterprise company

Mais de Aruba, a Hewlett Packard Enterprise company (20)

Airheads Tech Talks: Cloud Guest SSID on Aruba Central
Airheads Tech Talks: Cloud Guest SSID on Aruba CentralAirheads Tech Talks: Cloud Guest SSID on Aruba Central
Airheads Tech Talks: Cloud Guest SSID on Aruba Central
 
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
Airheads Tech Talks: Understanding ClearPass OnGuard AgentsAirheads Tech Talks: Understanding ClearPass OnGuard Agents
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
 
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.xEMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
 
EMEA Airheads- Switch stacking_ ArubaOS Switch
EMEA Airheads- Switch stacking_ ArubaOS SwitchEMEA Airheads- Switch stacking_ ArubaOS Switch
EMEA Airheads- Switch stacking_ ArubaOS Switch
 
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
EMEA Airheads- LACP and distributed LACP – ArubaOS SwitchEMEA Airheads- LACP and distributed LACP – ArubaOS Switch
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
 
Introduction to AirWave 10
Introduction to AirWave 10Introduction to AirWave 10
Introduction to AirWave 10
 
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
EMEA Airheads- Virtual Switching Framework- Aruba OS SwitchEMEA Airheads- Virtual Switching Framework- Aruba OS Switch
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
 
EMEA Airheads- Aruba Central with Instant AP
EMEA Airheads- Aruba Central with Instant APEMEA Airheads- Aruba Central with Instant AP
EMEA Airheads- Aruba Central with Instant AP
 
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.xEMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
 
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
EMEA Airheads-  Getting Started with the ClearPass REST API – CPPMEMEA Airheads-  Getting Started with the ClearPass REST API – CPPM
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
 
EMEA Airheads - AP Discovery Logic and AP Deployment
EMEA Airheads - AP Discovery Logic and AP DeploymentEMEA Airheads - AP Discovery Logic and AP Deployment
EMEA Airheads - AP Discovery Logic and AP Deployment
 
EMEA Airheads- Manage Devices at Branch Office (BOC)
EMEA Airheads- Manage Devices at Branch Office (BOC)EMEA Airheads- Manage Devices at Branch Office (BOC)
EMEA Airheads- Manage Devices at Branch Office (BOC)
 
EMEA Airheads - What does AirMatch do differently?v2
 EMEA Airheads - What does AirMatch do differently?v2 EMEA Airheads - What does AirMatch do differently?v2
EMEA Airheads - What does AirMatch do differently?v2
 
Airheads Meetups: 8400 Presentation
Airheads Meetups: 8400 PresentationAirheads Meetups: 8400 Presentation
Airheads Meetups: 8400 Presentation
 
Airheads Meetups: Ekahau Presentation
Airheads Meetups: Ekahau PresentationAirheads Meetups: Ekahau Presentation
Airheads Meetups: Ekahau Presentation
 
Airheads Meetups- High density WLAN
Airheads Meetups- High density WLANAirheads Meetups- High density WLAN
Airheads Meetups- High density WLAN
 
Airheads Meetups- Avans Hogeschool goes Aruba
Airheads Meetups- Avans Hogeschool goes ArubaAirheads Meetups- Avans Hogeschool goes Aruba
Airheads Meetups- Avans Hogeschool goes Aruba
 
EMEA Airheads - Configuring different APIs in Aruba 8.x
EMEA Airheads - Configuring different APIs  in Aruba 8.x EMEA Airheads - Configuring different APIs  in Aruba 8.x
EMEA Airheads - Configuring different APIs in Aruba 8.x
 
EMEA Airheads - Multi zone ap and centralized image upgrade
EMEA Airheads - Multi zone ap and centralized image upgradeEMEA Airheads - Multi zone ap and centralized image upgrade
EMEA Airheads - Multi zone ap and centralized image upgrade
 
Bringing up Aruba Mobility Master, Managed Device & Access Point
Bringing up Aruba Mobility Master, Managed Device & Access PointBringing up Aruba Mobility Master, Managed Device & Access Point
Bringing up Aruba Mobility Master, Managed Device & Access Point
 

Último

ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDE
ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDEADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDE
ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDELiveplex
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfinfogdgmi
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfAijun Zhang
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Websitedgelyza
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-pyJamie (Taka) Wang
 
Linked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesLinked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesDavid Newbury
 
Designing A Time bound resource download URL
Designing A Time bound resource download URLDesigning A Time bound resource download URL
Designing A Time bound resource download URLRuncy Oommen
 
Comparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioComparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioChristian Posta
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemAsko Soukka
 
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online CollaborationCOMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online Collaborationbruanjhuli
 
AI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarAI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarPrecisely
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdfPedro Manuel
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...DianaGray10
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding TeamAdam Moalla
 
NIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopNIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopBachir Benyammi
 
Computer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsComputer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsSeth Reyes
 
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationUsing IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationIES VE
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.YounusS2
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8DianaGray10
 

Último (20)

ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDE
ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDEADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDE
ADOPTING WEB 3 FOR YOUR BUSINESS: A STEP-BY-STEP GUIDE
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdf
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdf
 
201610817 - edge part1
201610817 - edge part1201610817 - edge part1
201610817 - edge part1
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Website
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-py
 
Linked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesLinked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond Ontologies
 
Designing A Time bound resource download URL
Designing A Time bound resource download URLDesigning A Time bound resource download URL
Designing A Time bound resource download URL
 
Comparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioComparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and Istio
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystem
 
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online CollaborationCOMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
 
AI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity WebinarAI You Can Trust - Ensuring Success with Data Integrity Webinar
AI You Can Trust - Ensuring Success with Data Integrity Webinar
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdf
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team
 
NIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 WorkshopNIST Cybersecurity Framework (CSF) 2.0 Workshop
NIST Cybersecurity Framework (CSF) 2.0 Workshop
 
Computer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and HazardsComputer 10: Lesson 10 - Online Crimes and Hazards
Computer 10: Lesson 10 - Online Crimes and Hazards
 
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve DecarbonizationUsing IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
Using IESVE for Loads, Sizing and Heat Pump Modeling to Achieve Decarbonization
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8
 

Enabling AirPrint & AirPlay on Your Network

  • 1. Enabling AirPrint and AirPlay on your Network March, 2014
  • 2. CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved 2 #AirheadsConf Agenda • Zeroconf Networking and Challenges • Aruba Technology Solution • Design, Build & Run • AirGroup in Distributed Networks • Scaling, Troubleshooting and Best Practices • New AirGroup Enhancements • Q & A
  • 3. 3 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Zeroconf Networking and Challenges
  • 4. 4 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Zeroconf: Overview • What is Zero Configuration Networking? • Apple Bonjour • Description of Protocols – IP Address Auto configuration – Multicast DNS (name resolution without DNS) – Service Discovery • DLNA/UPnP – Digital Living Network Alliance – Universal Plug and Play – Simple Services Discovery Protocol (SSDP)
  • 5. 5 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf mDNS • Used by Apple’s Bonjour implementation of Zeroconf • Absence of a DNS Server – Perform DNS queries via IP Multicast – Does not require any changes to the DNS Protocol (messages, resource record types, etc.) • Multicast DNS Queries – Uses the destination address 224.0.0.251 – Destination port: UDP 5353 – When a machine receives a response to a query, other machines on the network receive the response too and can add it to their own caches for future use.
  • 6. 6 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf SSDP • Used by DLNA’s UPnP – Based on HTTPU – Uses HTTP NOTIFY and M-SEARCH messages • SSDP queries – Uses the destination address 239.255.255.250 – Destination port: UDP 1900 • UPnP servers, renderers and control points Overview Function UPnP Bonjour Discovery protocol SSDP mDNS To advertise services HTTP NOTIFY mDNS response To find services HTTP M-SEARCH mDNS query
  • 7. 7 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Bonjour in the Enterprise? L2/L3 Aruba Mobility Controller SSID 2 (VLAN 10) SSID 1 (VLAN 20) Does not work across VLANs Increased channel utilization with multicast traffic No filtering of services
  • 8. 8 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Aruba Technology Solution
  • 9. 9 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Bonjour in the Enterprise with AirGroup L2/L3 Aruba Mobility Controller SSID 2 (VLAN 10) SSID 1 (VLAN 20) Bonjour across VLANs Reduced channel utilization Services can be filtered
  • 10. 10 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Enabling Bonjour across VLANs 1. Everybody sees everything • Enabling Bonjour across VLANs has opened up the Pandora's box 2. Lack of Security • Why would my personal device be visible to others? • How do I assign a device to be a common resource? • Why do I get need to know about a printer that is across the campus? AirGroup Benefits: • Context aware access control • Personalized AirGroup experience • Ease of installation
  • 11. 11 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Aruba Mobility Controller/Instant Intercepts queries and builds cache table Acts as a ‘proxy’ for user requests, unicasts response VLAN Bridging Traffic optimization over the air Allow/Block services globally
  • 12. 12 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Value Add with CPPM Registration portal for end users to register their personal devices (Apple TVs, Printers) Registration portal for network administrators to register shared devices (conference room Apple TVs, Printers) Define a “personal AirGroup” by specifying a list of users to share devices with. Define role and location attributes for shared devices. Time fencing for shared devices ClearPass
  • 13. 13 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Putting the pieces together.. AirGroup Solution Architecture Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Mobility Access Switch Instant 11n Access Point Campus 11n Access Points Mobility Access Switch Mobility Controller
  • 14. 14 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 1: Interactive K12 Classroom with AirGroup Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Teacher Students 1. Teachers share content using the Apple TV 2. Students can share & collaborate using the Apple TV 3. Users outside this classroom cannot use this Apple TV
  • 15. 15 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 2: Restricted Access University Classroom with AirGroup Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Teacher Students 1.Only Professors share content using the Apple TV 2. Students cannot use this Apple TV 3. Users outside this classroom cannot use this Apple TV
  • 16. 16 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 3: All Wireless Office Conference Room with AirGroup Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Employee Guest 1. Employee has access to the conference room Apple TV 2. Employee shares the Apple TV with guest for a limited duration 3. Guest is able to use Apple TV
  • 17. 17 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 4: Personal Device Access in University Dorms Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Student 1Student 2 1. Only Student 1 can access his personal printer and Apple TV 2. Student 2 cannot use Student 1’s personal devices 3. Student 1 can share his devices with Student 2
  • 18. 18 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 5: Common Device Access in a Retail Store Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Employee 2Employee 1 Shopper 1. Employees can engage with visitors using Apple TV and use print services 2. Visitors/Shoppers cannot use in-store devices
  • 19. 19 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 6: Per-Building Access in a Campus Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Users in the building can use services within the building Campus 1 Building 1 Campus 1 Building 2 Campus 1 Building 3
  • 20. 20 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Use Case 7: Per-Floor access in a Hospital Network Core / Data Center Aruba Mobility Controller Aruba ClearPass Policy Manager Other operations systems Aruba AirWave Network Manager Only doctors and nurses in ER get access to services Floor 3 – General Patient Care Floor 1 – ER Doctors, nurses & patients on level 3 get access to services
  • 21. 21 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Design, Build & Run
  • 22. 22 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Deployment Model • Supported AirGroup deployment models • Overlay model not supported Single controller Multiple Controllers AirGroup Domain 1 AirGroup Domain 2 IAP Multiple IAP Clusters AirGroup Domain 1 AirGroup Domain 2 AirGroup Deployment
  • 23. 23 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Deployment Model 1. The same mobility controller that terminates all APs and provides WLAN access runs AirGroup functionality too. 2. Trunk the VLANs, where wired devices like printers are connected, to the AirGroup controller. 3. Can operate with or without Clear Pass Policy Manager.
  • 24. 24 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Clusters and Domains
  • 25. 25 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf User Device Registration Portal with ClearPass User logs in using the AD credentials Device View from a user/admin perspective AP Mobility Controller ClearPass (Guest & PM) CPPM helps in providing a filtered mDNS response to users and reduce noise.
  • 26. 26 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Personal Device Registration What is the name of the Device? What is the MAC of the Device? Who else can use my “personal device”? -username Logged in as “Student 1”
  • 27. 27 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Common Device Registration based on User Name, Role or Location Logged in as “Network Admin” Who can use the device form – “location context”? - AP name, AP mac, AP-Group Which users can see the device– “shared with”? - usernames Which user group can see the device – “user role”? - User role
  • 28. 28 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Operation – Location Based Device Sharing AirGroup servers can be shared based on the following location attributes: 1. AP Name 2. AP Group 3. AP FQLN
  • 29. 29 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Operation – Location Based Device Sharing 1. Based on AP Name Building Floor 1 AP2 AP1 2. Based on ARM, AP2 is an RF neighbor 1. On ClearPass registration portal, share the AirGroup printer with AP1 3. iPhone associated to AP2 can now see AirGroup printer associated to AP1
  • 30. 30 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Operation – Location Based Device Sharing 2. Based on AP Group Campus Building 2 Building 4 Building 3 Building 1 AP Group 1 AP Group 4 AP Group 3 AP Group 2 AirGroup services restricted to each building
  • 31. 31 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Operation – Location Based Device Sharing 3. Based on AP FQLN FQLN = <ap-name>.<floor>.<building>.<campus> AP1 Building Floor 1 AP1 AP1 Building Floor 2 Building Floor 3 FQLN = AP1.Floor 2.1344.Aruba FQLN = AP1.Floor 3.1344.Aruba FQLN = AP1.Floor 1.1344.Aruba Apple TV associated to AP1 4. iPhone on Floor 2 is associated to AP1 on Floor 3 1. On ClearPass registration portal, share Apple TV with FQLN = AP1.Floor 2.1344.Aruba 2. Users associated to AP1 on Floor 1 can see the Apple TV 3. Users associated to AP1 on Floor 3 can see the Apple TV AP2 FQLN = AP2.Floor 2.1344.Aruba
  • 32. 32 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Controller Configuration Require CPPM Device Registration AirGroup Enabled CPPM Server AirGroup CoA Update
  • 33. 33 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup ClearPass Configuration.. CoA Update Port must match!
  • 34. 34 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf ..AirGroup ClearPass Configuration ClearPass reads the controller configuration
  • 35. 35 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup ClearPass Configuration Controller Information used for AirGroup DeviceRegistration
  • 36. 36 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup in Distributed Networks
  • 37. 37 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Single IAP Cluster mDNS packet (AirPrint service) mDNS packet (AirPlay service) Database P1 Air Print TV1 Air Play mDNS, AirPlay service multicast query mDNS, TV1 service unicast response LAN AirPrint printer (P1) SSID: VLAN1 SSID: VLAN2 Apple TV (TV1) IAP 1 IAP 3IAP 2 Database P1 Air Print TV1 Air Play Database P1 Air Print TV1 Air Play ROLE: VLAN2 SSID: VLAN3
  • 38. 38 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Single IAP cluster with CPPM Server mDNS packet (AirPrint service) mDNS packet (AirPlay service) LAN AirPrint printer (P1) SSID: VLAN1 SSID: VLAN2 Username: X Servers discovered: P1 and TV1 Apple TV (TV1) IAP 1 IAP 3IAP 2 SSID: VLAN3 CPPM Policy Enforcement P1 is shared with X and Y TV1 is shared with X SSID: VLAN2 Username: Y Servers discovered: P1
  • 39. 39 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Multiple IAP Clusters Database sync every 2 minutes Swarm 1 Servers P1 AirPrint TV1 AirPlay Swarm 2 Servers P2 AirPrint TV2 AirPlay Swarm 1 Servers P1 AirPrint TV1 AirPlay Swarm 2 Servers P2 AirPrint TV2 AirPlay VC VC IAP 1 IAP 3IAP 2 IAP 4 IAP 6IAP 5 Router AirPrint printer (P1) SSID: VLAN1 Apple TV (TV1) SSID: VLAN3 SSID: VLAN2 AirPrint printer (P2) SSID: VLAN4 Apple TV (TV2) SSID: VLAN6 SSID: VLAN5
  • 40. 40 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup UI • Navigate to Settings -> Advanced settings -> AirGroup
  • 41. 41 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf CPPM Server Configuration AirGroup CoA port – This can’t be standard CoA port as it is used by Auth/STM server already. CoA only – This server is only to get CoA packet, this server wouldn’t be used for MAC-Authorization.
  • 42. 43 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Three ways to discover wired AirGroup servers: 1. Trunk all VLANs to the AirGroup controller 2. Configure a Tunneled Node between MAS and AirGroup controller. 3. Configure an L2 GRE tunnel and redirect mDNS packets across the tunnel. AirGroup on 3rd party switches: • Trunk VLANs to the AirGroup controller AirGroup on the Mobility Access Switch
  • 43. 44 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Scaling, Troubleshooting and Best Practices
  • 44. 45 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf Impact of Broadcast Controls on AirGroup Two broadcast control knobs: • Broadcast-Multicast (BCMC) Optimization: VLAN specific • Broadcast-filter-all: VAP specific – When AirGroup is enabled, mDNS exceptions are automatically created to bypass above knobs. – Enabling the above controls does not affect AirGroup functionality.
  • 45. 46 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup Scalability Limits • AOS 6.3/6.4 Platform limits: • In an AirGroup domain, the total number of AirGroup users and servers is bound by the platform limit of the top-end controller. • Hard cap on the scaling limits • Scaling limits were defined based on CPU and memory utilization on the controller: o o (7210) # show airgroup internal-state statistics AirGroup Server and User Limits in Controllers 3200X M 3400 3600 M3 7210 7220 7240 # AirGroup servers 500 1000 2000 2000 2000 2000 2000 # AirGroup users 1500 3000 6000 6000 9000 12000 16000 mDNS Packet Rate Limits in Controllers 3200 3400 3600 M3 7210 7220 7240 mDNS packets received per second 10 10 20 20 20 25 30
  • 46. 47 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf How to Measure AirGroup Traffic.. • Before enabling AirGroup 1. If administrator is permitting AirGroup traffic  ! ip access-list session mdns any any udp 5353 permit ! To see ACL hits: (poc-campus-mc1) #show acl hits | include mdns 2. If administrator is denying AirGroup traffic  ! ip access-list session mdns_deny any any udp 5353 deny !  To see ACL hits: (poc-campus-mc1) #show acl hits | include mdns_deny
  • 47. 48 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf ..How to Measure AirGroup Traffic Steps to calculate the number of mDNS packets hitting the controller: 1. Run the show acl hits command once (say at 10am) to reset the New Hits counter. Note the time. 2. Run the command again after, say 15 mins, and note the number of mDNS hits under New Hits. This gives the number of mDNS packets seen in a duration of 15 minutes. (# of mDNS packets)/(15*60) gives the rate of mDNS packets per second. 3. Repeat step2 after another 15 mins. 4. Run the test multiple times to average out the mDNS packet rate.
  • 48. 49 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup: Debugging and Logs • AirGroup related debugging information is available under the user, system and security debug logs. • Use the following debug levels to collect debug information for AirGroup: • logging level debugging user process mdns • logging level debugging system process mdns • logging level debugging security process mdns • Apart from the debug logs, collect the following command outputs for debugging AirGroup issues: • Show airgroup servers verbose • Show airgroup users verbose • Show airgroup cache entries • Show airgroup internal-state statistics • Collect tech-support logs from the AirGroup controller at 2 or 3 instances spaced about 5-10 minutes apart
  • 49. 50 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf General Best Practices.. • AirGroup in large deployments o Enabling all AirGroup services consumes a large amount of system resources o Start by enabling select AirGroup services o AirPrint, AirPlay and Chromecast services are enabled by default in AOS 6.4. For a new service to be allowed, create a custom AirGroup service. o Start by restricting AirGroup services to most important VLANs o Disable the allowall service • When deploying wired AirGroup servers, make sure that the VLANs are trunked all the way to the controller running AirGroup.
  • 50. 51 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf • Disable deny-inter-user firewall settings. These settings can prevent clients from communicating each other. • For large deployments, use CPPM to register the AirGroup servers with location tag for better performance. • If AirGroup is enabled on multiple controllers in a deployment that share common VLANs, configure AirGroup domains and add the controllers to the cluster. ..General Best Practices
  • 51. 52 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AirGroup: AP Forwarding Mode • AirGroup is supported only on tunnel and de-tunnel forwarding modes • AirGroup services may break if NATing is enabled on user VLANs
  • 52. 53 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf New AirGroup Enhancements
  • 53. 54 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved #AirheadsConf AOS 6.4 AirGroup Enhancements • AirGroup support for DLNA-based devices • Support for virtual mDNS device configuration • CPPM Integration • Ability to share AirGroup services based on logical groups • Static time fencing • UI dashboard enhancements • AirWave support • Coming soon
  • 54. 55
  • 55. 56 CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved Thank You #AirheadsConf