Apple TV on 5508 Guest/BYOD WLAN

Currently our Guest and employee BYOD clients get dropped on to the same vlan. Guest is an open wlan, and BYOD is doing 802.1X with PEAP. We are wanting to allow access to Apple TV devices for both guest and BYOD clients which are on the same vlan/segment. Do we still have to configure multicast on the 5508 controller in this scenario? Also, has anyone been able to successfully deploy Apple TV devices on wireless using 802.1X PEAP?
We have looked into connecting the Apple TV's via a wired connection and using the mDNS feature on the WLC 7.4 code. However, the wired vlans are not local to the WLC. Is there any way around this? Thanks

Hi ,
From 7.5 onwards , its not dependent on Multicast configuration etc. MDNS is allowed across multiple Vlans with Apple TV (and many other devices offering any service like printer) as source can reside in any Vlan it wants. Only requirement is mDNS configuration at the Global level , SSID /interface level. Basically it is possible with the help of mDNS snooping.
http://www.cisco.com/c/en/us/td/docs/wireless/technology/bonjour/7-5/Bonjour_Gateway_Phase-2_WLC_software_release_7-5.html
Regards
Dhiresh
**Please rate all helpful posts**

Similar Messages

I recently added an extender to my verizon router to be able to connect to apple tv in my guest house. the apple tv message in the guest house says it cannot connect to the server at this time.

I have two problems. Firstly I rented two movies and have not been able to watch them. Error on screen says 'cannot load at this time, try later'. Second problem is that I added a wi-fi extender to my verizon router to connect to apple tv in my guest house. message on screen in guest house says 'cannot connect to server'. I need some set up help.

Hi Kailik Hunter,
Thanks for using Apple Support Communities. This article has some steps you can try if you're unable to sign in to your Apple TV and continue with setup:
Apple TV: Basic troubleshooting
http://support.apple.com/kb/ht1551
If you are still having trouble, you can try to reset your equipment by unplugging Apple TV, your television, your wireless networking equipment or AirPort Base Station, and your router from their power outlet. Wait 30 seconds, then plug everything back in.
Cheers,
- Ari

Wlc 5508 : guest users to be configured only give access for internal SAP application

Hi,
I have one new requirement with one of the client.
I have wlc 5508 with 6.0 firmware. I need to have one guest wlan which will have access only for internal SAP application.
I have gone through cisco document for internet guest users , where web page will be redirected with user name and password once it is authenticated , we can access internet.
Provided if we have access list configured in wlc ... for internet access only /
what about this mentioned scenario ?
can anybody suggest on the same ?

Hi Vinod,
Go for the ACL on any Router or the switch.. i prefer not on the WLC..
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
Here is the link as well to do it on the WLC
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807810d1.shtml
Lemme know if this answered ur question..
Regards
Surendra

Guest anchor WLAN and DHCP

hi,
I am trying to setup a guest WLAN using a local controller and a controller in my DMZ using the mobility-anchor configuration.
Ideally I'd like to use an external DHCP server in my DMZ, but for now, I'd be happy getting the local DHCP server on the DMZ controller working.
Local Controller config
Configured mobility-groups, verified mobility group is working
Created WLAN called "guest" - assigned it to the management interface.
Have tried the following with regards to DHCP on this WLAN.
     Set it to "override" and specified the DMZ controller's mangement interface
     Set DHCP to "assignment required" and specified the DMZ controller's management interface for the DHCP server for the local controller's management      interface
     Left DHCP server blank on the local controller's management interface
Setup the DMZ controller as the mobility anchor for the "guest" WLAN
DMZ controller config
Configured mobility-groups, verified mobility group is working
Created WLAN called "guest"
Created a dynamic interface called "guest" associated to the "guest" WLAN
Setup mobility anchor for the "guest" interface, mobility-anchor = local controller
Created an internal DHCP server scope and enabled it
Have tried the following with regards to DHCP on the "guest" WLAN
     Set DHCP to "assignment required" and specified the IP address of the controllers management interface as the DHCP server on the "guest"      dynamic interface
     Set DHCP to "assignment required" and specified the IP address of the controllers "guest" dynamic interface as the DHCP server on the "guest"       dynamic interface
     Set DHCP to "override" and specified the DMZ controller's management interface IP
     Set DHCP to "override" and specified the DMZ controller's "guest" interface IP
After all this, my client still cannot get an IP address via DHCP. I verfiied the client is associating to the AP.
Any help would be appreciated.
Thanks
Lee

on the DMZ controller, what is the output of a debug client < mac address of the client> You may also want to capture debug mobility handoff enable, from both WLC.
For the guest, the DHCP is going to come from the DMZ controller, so there is no real need to configure anything on the internal WLC. One thing of note, the WLAN config on both the DMZ and Internal must match exactly with the exception of the linked interface, otherwise you will not anchor.
while runnign the debug, show dhcp proxy, for the WLC to be the DHCP server, proxy needs to be enabled.

5508 Guest Anchor 7.4MR2

We are upgrading all Foreign 5508 WLC's to 7.4MR2. Out Guest Anchor is currently on 7.0.235. Any reason not to upgrade the Guest Anchor to 7.4MR2? Has anyone encountered any issues doing this? We are not having any issues on 7.0, and I just did not want to introduce any.

mine is with the following. Still trying to figure out why.
*osapiBsnTimer: Mar 17 12:58:05.949: f8:16:54:07:a8:78 apfMsExpireCallback (apf_ms.c:626) Expiring Mobile!
*apfReceiveTask: Mar 17 12:58:05.949: f8:16:54:07:a8:78 apfMsExpireMobileStation (apf_ms.c:6655) Changing state for mobile f8:16:54:07:a8:78 on AP 00:e1:6d:b2:a6:90 from Associated to Disassociated
*apfReceiveTask: Mar 17 12:58:05.949: f8:16:54:07:a8:78 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds
*annyway, i've tried increasing the Session Timeout to 8hours and still testing it .. As my problem is not consistent, i have to monitor and see if its solved.

WLC 5508 Guest termination Tunnel

Hi to all,
I've a question regarding Guest Wireless Access: can the WLC5508 do Guest Termination Tunnel as they do the WLC440X??? I suppose yes...or better say I hope yes ;-)
What about the AP support? Can I mix as is possible with the 440X where the internal WLC are licensed for 50 AP and the external one for only 12???
Thanks for a feedback!

It sounds like you're running into the same project as me. I have all 4402's and was considering upgrading to a 5508 for our headquarters. This happens to be our guest anchor as well. To ensure that mobility will work, which is a requirement for guest, carefully read the version 6 release notes. In a nutshell though, I've found that this will work with 4.2 code and up to version 6 on a 5508. I'd check the release notes to be exactly sure of the 4.2 release though. 4.2.205.0 has been working well for me. I don't have our 5508 yet, but I'll provide an update once it gets here. In a perfect world, having the same version 6 release on the 4402's and the 5508 will ensure you don't have anchor / mobility problems.
As far as the different AP licenses go on the controllers, this will only affect the size of the network you can have at each site (because it restricts the number of AP's, ie. 25 versus 12). You can definitely use guest on a 50 AP controller with a 12AP controller at the other site. They don't have to match...

5508-DHCP per WLAN basis

dear all,
kindly guide me how to configure WLC 5508 internal DHCP per WLAN basis , i read the following document it is clearly mentioned that we can configure DHCP on WLC 5508 per WLAN basis. but i did not find the configuration per WLAN basis
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70/c70wlan.html#wp1293808
need your kindly response
my email address
[email protected]

When you configure dynamic interfaces on your 5508, you can specify DHCP server IP address. Later on you will map a dynamic interface to WLAN.
Also under WLAN advanced setting, you can specify DHCP server IP, if you want to override dynamic interface configured DHCP server to a particular WLAN.
HTH
Rasika
**** Pls rate all useful responses ***

IPhones in Guest Access WLAN Configured for Web-Passthrough

The iphone clients will gain access to our guest WLAN by clicking our "Accept Page". It works great until 10-15 minutes later, they have to click the "Accept Page" again.
Is there some way of creating a rule that says that is a particular client has clicked the "Accept Page" once, they don't have to click it again, for any reason, for a 24 hour period?
TIA,
Amir

Are the iphones going to sleep mode?
Usually after the phone is in sleep for 3 to 5 minutes, it drops the wifi connection and it has to associate again to the AP.
You can change the timeout values I believe on the WLC.

Cisco WLC 5508 Guest Authentification issue

Hi ..
I have one interface setup to a Cisco 2921 router connected to a Cable modem.
DHCP is on the 2921.
when I connect to the ssid for my guest i'm redirected to the authentification portal 1.1.1.1 .
I'm putting valide credential and when pressing the submit button .. it just go anywhere.
I have setup another SSID with a psk and it's working fine.. getting ip and able to browse internet.
From what i have read... it's apparently DNS issue on my router.. but what should I check.

My client has ip like that
   Description . . . . . . . . . . . : Intel(R) 82579LM Gigabit Network Connection
   Physical Address. . . . . . . . . : 40-2C-F4-ED-AD-FB
     IPv4 Address. . . . . . . . . . . : 192.168.6.36
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.6.1
   DNS Servers . . . . . . . . . . . : 24.200.241.37
                                       24.200.243.189
DNS are the one from my service provider

Self registered guests on WLAN

I'm attempting to get several slightly different types of public access web configured on a Cisco WLC 4404.
the first type is a pre-registration service, whereby the user needs to go to reception or some other designated staff, who configures a user on the WLC for them to log on with. The WLC can do this out of the box without much config and I've got this all working.
the second is the one I'm having trouble with. I want guests to be able to log on without visiting anyone first (they'll be limited to filtered web browsing only - no VPNs and whatnot). The user would need to go to a splash screen, read an AUP, enter email address, some personal info and choose a password. from that point on they can use the service at will. there'd be no real checks made on the information, i.e. that the email was a valid one.
I currently have this setup working with a nocat service running on a gateway server and need to pipe a network over to an autonomous AP whenever i need to put this out.
Can the WLC do this job on it's own? Places like hotels do a similar thing when you get on the wifi and are prompted for your card info - although I just want info for logging purposes - not billing.
any help or info about similar setups would be great.
Thanks

The same web-auth screens where you set up the lobby ambassador/ guest logon configuration, can be set to a "passthrough" mode instead. One of the options in a passthrough setup is an email address entry box, but I've never found where (or even if) those emails are stored. You could consider pointing the passthrough page at an external web server and having the forms saved there.
As I recall, though, a single controller can only have one instance of web logon settings configured, so you wouldn't be able to run both systems on the same controller.

HREAP with guest/secured WLANs

Here is the scenario:
I have a main site with WLC. VLAN 10 is mgmnt and AP-mgr, VLAN20 is secure user, VLAN30 for guests. There is a user-SSID and guest-SSID. Guest users get their IP from DHCP on WLC. APs and secure-users get their IPs from scopes on another DHCP server.
I need to deploy APs for a branch, with a high speed routed WAN connection and no local Internet.
I have created a separate AP-group for the branch.
Can I use the same SSID's for the branch? if yes, how?
Branch APs will be configured in HREAP mode and local switching.
I like to configure secure users in branch for central-auth/local-switching. Branch guests as central-auth/central switching.
Any information that helps accomplish above scenario will be appreciated.

Adding to Ramin's post, ifyou have a high speed WAN link, then run the ap's in local mode and use AP Groups. If you just want the secure users to be local switched then on that ssid you would enable local switching and then when you set the ap to h-reap, you can set the native vlan which would be your management vlan the ap will be on and you will also define you ssid local vlan id. I would keep vlan 20 the same on all branches too.

Wlc 5508 Guest logon page

Where do you turn this option off? i have looked under security and did not see any thing. Thanks

Wlans -> Security -> Layer 3. ?
Sent from Cisco Technical Support iPad App

How do you extend the guest network on a time capsule to an apple express?

I have a time capsule in my main house with a password protected guest network i set up an apple express in the guest house to extend the networks. Unfortunately the guest house / apple express is only amplifying the main house network. I would like my tenant to join the guest network from apple express. Is that possible?
How do you extend the guest network on a time capsule to an apple express?

I would like my tenant to join the guest network from apple express. Is that possible?
Sorry, but Apple does not allow the Guest Network to be extended in any way.

Guest enrollment (self-service) on WLC 5508

Hi folks,
My desired setup is to integrate wlc 5508 (guest anchor) into cisco ise or nac server for guest authentication.
And then, ise or nac will connect to an SMS gateway to deliver credentials to mobile phones.
But I am looking into something unique where guests that enter into our facility can do self-enrollment. (i.e. guest connects to ssid and redirected to web authentication that asks for user information like name, email, mobile, etc).
After this process, guest will receive an sms for the credentials.
Does anyone here know a reliable third party software for the said enrolment that will work fine with my setup.
Your response are highly appreciated.

Hi Saurav,
Now it is supported on 1.3
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_13_chapter_0101.html

Internal WLAN vs Guest WLAN

Hello
I have a Cisco AIR-CT5508-K9 running revision 7.
Can anyone explain to me the differences between a guest type WLAN and a WLAN type WLAN please? I have searched a fair bit but can't actually find an explanation.
Also, can any one please let me know what the profile name is for please? I see that the SSID is removed on a guest lan so it must be important in some way.
Thanks all in advance
Anthony

Hi,
Q1>> Can anyone explain to me the differences between a guest type WLAN and a WLAN type WLAN please? I have searched a fair bit but can't actually find an explanation.
ANS - Guest WLAN is mostly for the WIRED GUEST USERS and the Normal WLAN is for the Wireless users.. so If you want to create a guest LAN for wired guest users, choose Guest LAN
The below link will explain you on the Wired Guest users..
http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70users.html#wpxref20380
Also most of the Guest WLAN will have a time stamp configured for the client so that after that time stamp the client entry will be inactive..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

Apple TV on 5508 Guest/BYOD WLAN

Similar Messages

Maybe you are looking for