Dell W-Series 207 Instant 6.5.1.0-4.3.1.0 User Guide - Page 286

Enforce ClearPass registering, ClearPass Settings

Page 286 highlights

7. Ensure that the required AirGroup services are selected. To add any service, click New and add. To allow all services, select allowall. If a custom service is added, you can add a corresponding service ID by clicking New under Service ID. If a W-IAP is upgraded to the current release with the Bonjour check box enabled, ensure that the corresponding Bonjour services are selected. Instant supports the use of up to 6 custom services. 8. Based on the services configured, you can block any user roles from accessing an AirGroup service and restrict the AirGroup servers connected to a specific set of VLANs from being discovered . The user roles and VLANs marked as disallowed are prevented from accessing the corresponding AirGroup service. You can create a list of disallowed user roles and VLANs for all AirGroup services configured on the W-IAP. For example, If the AirPlay service is selected, the edit links for the airplay disallowed roles and airplay disallowed vlans are displayed. Similarly, if sharing service is selected, the edit links for the sharing disallowed roles and sharing disallowed vlans are displayed. l To block user roles from accessing an AirGroup service, click the corresponding edit link and select the user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user roles configured in your W-IAP cluster. l To block VLANs from allowing access to an AirGroup service, click the corresponding edit link and select the VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs configured in your W-IAP cluster. 9. ClearPass Settings-Use this section to configure the ClearPass Policy Manager server, CoA server, and enforce ClearPass registering. l CPPM server 1-Indicates the ClearPass Policy Manager server information for AirGroup policy. l Enforce ClearPass registering-When enabled, only devices registered with ClearPass Policy Manager will be discovered by Bonjour devices, based on the ClearPass Policy Manager policy. In the CLI To configure AirGroup: (Instant AP)(config)# airgroup (Instant AP)(airgroup)# enable [dlna-only | mdns-only] (Instant AP)(airgroup)# cppm enforce-registration (Instant AP)(airgroup)# cppm-server (Instant AP)(airgroup)# cppm-query-interval (Instant AP)(airgroup)# disallow-vlan (Instant AP)(airgroup)# enable-guest-multicast (Instant AP)(airgroup)# multi-swarm (Instant AP)(airgroup)# end (Instant AP)# commit apply To enable DLNA support: (Instant AP)(config)# airgroup (Instant AP)(airgroup)# enable dlna-only (Instant AP)(airgroup)# end (Instant AP)# commit apply To enable support for Bonjour services: (Instant AP)(config)# airgroup (Instant AP)(config)# enable mdns-only (Instant AP)(airgroup)# end (Instant AP)# commit apply To configure AirGroup services: (Instant AP)(config)# airgroupservice 286 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435

286
| Services
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
7. Ensure that the required AirGroup services are selected. To add any service, click
New
and add. To allow all
services, select
allowall
. If a custom service is added, you can add a corresponding service ID by clicking
New
under
Service ID
.
If a W-IAP is upgraded to the current release with the
Bonjour
check box enabled, ensure that the
corresponding Bonjour services are selected.
Instant supports the use of up to 6 custom services.
8. Based on the services configured, you can block any user roles from accessing an AirGroup service and
restrict the AirGroup servers connected to a specific set of VLANs from being discovered . The user roles and
VLANs marked as disallowed are prevented from accessing the corresponding AirGroup service. You can
create a list of disallowed user roles and VLANs for all AirGroup services configured on the W-IAP. For
example, If the AirPlay service is selected, the
edit
links for the
airplay disallowed roles
and
airplay
disallowed vlans
are displayed. Similarly, if sharing service is selected, the
edit
links for the
sharing
disallowed roles
and
sharing disallowed vlans
are displayed.
l
To block user roles from accessing an AirGroup service, click the corresponding
edit
link and select the
user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user
roles configured in your W-IAP cluster.
l
To block VLANs from allowing access to an AirGroup service, click the corresponding
edit
link and select
the VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs
configured in your W-IAP cluster.
9.
ClearPass Settings
—Use this section to configure the ClearPass Policy Manager server, CoA server, and
enforce ClearPass registering.
l
CPPM server 1
—Indicates the ClearPass Policy Manager server information for AirGroup policy.
l
Enforce ClearPass registering
—When enabled, only devices registered with ClearPass Policy Manager
will be discovered by Bonjour devices, based on the ClearPass Policy Manager policy.
In the CLI
To configure AirGroup:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable [dlna-only | mdns-only]
(Instant AP)(airgroup)# cppm enforce-registration
(Instant AP)(airgroup)# cppm-server <server>
(Instant AP)(airgroup)# cppm-query-interval <interval>
(Instant AP)(airgroup)# disallow-vlan <vlan-ID>
(Instant AP)(airgroup)# enable-guest-multicast
(Instant AP)(airgroup)# multi-swarm
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable DLNA support:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable dlna-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable support for Bonjour services:
(Instant AP)(config)# airgroup
(Instant AP)(config)# enable mdns-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To configure AirGroup services:
(Instant AP)(config)# airgroupservice <airgroup-service>