There is a requirement to provide Airplay services on our wireless network across a 30 floor building.
Apple TVs will be installed on 2-3 presentation rooms on each floor.
The users will have to use our existing BYOD network and Apple TVs to mirror their iPads screens to larger sreen TVs.
Currently our network consistrs of a pair of 5508s on the Campus site and another pair in the DMZ running 126.96.36.199.
BYOD WLAN is using EAP-TLS and traffic is anchored to the DMZ WLCs where it is routed to the Internet. BYOD traffic has no access back to the Campus LAN. The BYOD network profile and the certificate for each client device are provisioned using Aruba Amigopods. Finally, p2p droping is enable on the WLAN.
We are discussing the following scenarios:
1) Client device connects to BYOD WLAN - Apple TV connects to BYOD WLAN.
This scenario is not possible as Apple TVs do not support EAP-TLS or the provisioning process using the Amigopods. Also p2p would block Airplay services.
2) Client device connects to BYOD WLAN - Apple TV connects to a new "Apple-TV" WLAN.
In this scenario both WLANs will be anchored to the DMZ WLCs. BYOD WLAN in the DMZ WLC will be mapped to an interface assigned to VLAN A and Apple-TV on another interface assigned to VLAN B. P2p blocking will not be enabled ont the Apple-TV WLAN.
In order for this scenario to work we will need to upgrade our DMZ WLCs to version 7.4 to support Bonjour Gateway services.
This scenario was tested in our lab and it is working for a single Apple TV device.
If we applied this scenario on the 30 floor building with all the Apple TVs turned on and connected to the Apple-TV WLAN, will our BYOD device be able to see all the Apple TVs from every floor?
How can we filter the Apple TVs available depending on the floor the user is located? For example if the user is on floor 1, we would like only Apple TVs from that floor to be available to the user.
Finally, if an ACL is applied on the DMZ WLC interface (VLAN A) blocking traffic to VLAN B, do we need to permit multicast IP 188.8.131.52 on that ACL for Bonjour to work between the 2 VLANs?