Configuring AirGroup on Instant

Configuring AirGroup and its service requires that you enable the AirGroup feature. IAP AirGroup supports two default services i.e. AirPlay and AirPrint.

Using the Instant UI

Enabling or Disabling AirGroup

As the first step in configuring AirGroup services, you must enable AirGroup in the Instant UI.

1.

Go to Settings > Air Group to enable this feature.

2.

Select Enable Air Group to view the AirGroup Settings.

Instant supports two types deployment models:



Intra Cluster



Inter Cluster

In the Intra Cluster model, the IAP does not share the mDNS database information with the other clusters. In the Inter Cluster model, the IAP shares the mDNS database information with the other clusters.



Enable Air Group across mobility domains— Select Enable Air Group across mobility domains to enable Inter cluster. By default, this feature is disabled. Navigate to L3 Mobility tab of Settings to define a set of clusters.



Enable Air Print— When enabled, the following two options are made available:



Air Print disallowed roles— Clients with these roles will not have access to AirPrint devices.



Air Print disallowed VLANs — No AirPrint servers will be seen on these VLANs.



Enable Air Play— When enabled, the following two options are made available:



Air Play disallowed roles— Clients with these roles will not have access to AirPlay devices.



Air Play disallowed VLANs — No AirPlay servers will be seen on these VLANs.



Clear Pass Settings— Use this section to configure the CPPM server, CoA server and enforce Clear Pass registering.



CPPM server 1— Indicates the ClearPass Policy Manager server information for AirGroup policy. Refer to Configuring AirGroup-CPPM Interface in Instant for more information.



Enforce Clear Pass registering— When enabled, only devices registered with CPPM will be discovered by Bonjour devices, based on the CPPM policy.

Figure 169 - Enabling AirGroup

Disallow Role

By default, an AirGroup service is accessible by all user roles configured in your IAP cluster. The disallow role option selectively prevents specified user roles from accessing AirGroup services.

Perform the following steps to configure disallow role from accessing AirPrint servers and disallow learning of AirPrint servers on the configured VLAN as shown in Figure 170 and Figure 171.

Figure 170 - AirPrint Disallowed Roles

1.

In the Enable Air Print section of the Instant UI, select Edit . The Air Print Disallowed Roles window appears.

2.

Use the arrow keys to move the available roles to the selected window and vice versa.

3.

Click OK to apply the selected roles as disallowed roles.

Disallow VLAN

By default, an AirGroup service is accessible by users or devices in all VLANs configured in your IAP cluster. You can enable or disable learning of AirGroup services in a specific VLAN using the Air Print Disallowed VLANs configuration window.

Figure 171 - AirPrint Disallowed VLANs

1.

Select Edit (the field next to Air Print disallowed VLANs). The Air Print Disallowed VLANs window appears.

2.

Enter the VLANs on which you want to disallow learning of AirGroup services.

3.

Click OK to apply these changes.