topic Bonjour gateway on AP: enable on all AP's, or just on a few? in Access Points - Indoor and Outdoor

Bonjour gateway on AP: enable on all AP's, or just on a few?

pieter_schepens — Tue, 06 Oct 2020 19:12:45 GMT

We're using Bonjour Gateway on AP (not on the ZoneDirector). That works fine: Apple TV's are published to the clients VLAN and they can reach them.
Question: is it necessary/recommended to enable the Bonjour Gateway configuration on all AP's, or just a few? If a wireless client is connected to an AP, does that particular AP need to have the Bonjour Gateway configuration, or can the wireless client see the Apple TV's if Bonjour Gateway is configured only on some other AP?

Some context: we're trying to configure Bonjour fencing to limit the amount of Apple TV's the clients can see, but that doesn't seem to work. Any advice is very welcome.

(ZD1200, 10.4, R500, R510, R550)

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

syamantakomer — Wed, 07 Oct 2020 13:42:44 GMT

Hi Pieter,

On ZD, bonjour gateway is a global setting. This means, once enabled, it will be enabled on all the APs. However, you can choose bonjour fencing profiles on individual AP groups.

If feature is not working, please double check the configuration and accordingly open a case with support.

Regards,
Syamantak Omer

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

pieter_schepens — Wed, 07 Oct 2020 14:10:39 GMT

Thanks for your reply. I know that Bonjour Gateway is a global setting, but we use the ZoneDirector setting “Bonjour Gateway on AP” (recommended when there’s a layer 3 switch between the AP’s and the ZD). That works well, but what’s not clear from the documentation: if you’re using Bonjour Gateway on AP, on how many AP’s do you have to enable a Bonjour Gateway; on one AP per zone/floor/building/VLAN? On many AP’s? on all AP’s?

As for limiting the reach of Apple TV’s with Bonjour Fencing: is the service “Apple TV” enough, or do we have to configure more rules with more services in the Bonjour fencing configuration? Just limiting the “Apple TV” service doesn’t seem to do the trick: the ATV’s are still visible for everyone in the client VLAN.

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

syamantakomer — Wed, 07 Oct 2020 14:26:32 GMT

Hi Pieter,

Global setting means it will get enabled on ALL APs and you don't need to do anything else to make it work, except defining the service set and VLAN mapping.

Bonjour Fencing limits the service to a physical area (AP). To understand this well, please refer the below document.

http://docs.ruckuswireless.com/zonedirector/10.2/GUID-FF7DA88B-ABFF-4519-B94C-8283D6ED14E9.html

For example, if you have 3 APs, AP1, AP2 and AP3, and enabled Bounjour Fencing, Apple TV connected to AP1 should not be visible to a client connected on AP2 or AP3.

Regards
Syamantak Omer

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

pieter_schepens — Thu, 08 Oct 2020 10:20:06 GMT

Hi Syamantak

The Ruckus documentation says "In heavy use and if using AirPrint, AirPlay, and AppleTV at a site/location, consider defining one service on each of three different AP Bonjour Gateways to distribute the memory/CPU utilization."

Because we're using Airplay and Apple TV in heavy easy (and there's a L3 switch between ZD and AP's), we're not using "Bonjour Service on ZoneDirector Site" but "Bonjour Service on AP Site" (Enable Bonjour gateway on AP). When we enabled the global setting just on the ZD (Bonjour Service on ZoneDirector Site) and not on the AP's, we experienced delays and poor quality of Airplay mirroring.

Which scenario do you suggest:

Just enable "Bonjour Service on ZoneDirector Site", and not on the AP's?
Enable "Bonjour Service on AP Site", and then configure the Bonjour Gateway on each of three different AP's?
Enable it both (on ZoneDirector Site AND on AP Site)?

Something that's also not clear for us: if we configure Bonjour Gateway on the AP's, do we have to configure one set of rules (services and VLAN mapping) and apply that same set to each of three AP's? Or is it better to make different sets of rules (for each building/floor) and apply those to each of three AP's in that particular building/floor?

Thanks for your advice
Pieter

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

syamantakomer — Thu, 08 Oct 2020 16:00:12 GMT

Hi Pieter,

The Ruckus documentation says "In heavy use and if using AirPrint, AirPlay, and AppleTV at a site/location, consider defining one service on each of three different AP Bonjour Gateways to distribute the memory/CPU utilization."

Could you provide the link to this referance document.

AFAIK, on ZD you can either enable Bonjour GW on ZD or on APs (as explained before, it is GLOBAL SETTING, means it will be enabled on all the APs).

I will check on my lab setup to review the settings again and see if there is anything, which we are missing.

Regards,
Syamantak Omer

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

pieter_schepens — Fri, 09 Oct 2020 06:53:58 GMT

Hi Syamantak

This is the link to the page in the documentation: https://docs.ruckuswireless.com/zonedirector/10.4.1/GUID-E70FBD17-BB9F-4A4D-9F95-BE19E9699708.html and http://docs.ruckuswireless.com/zonedirector/10.2/GUID-E70FBD17-BB9F-4A4D-9F95-BE19E9699708.html

Any extra info on Bonjour gateway and fencing is very welcome.
In order to limit the advertising of Apple TV's, is it enough to block the service "Apple TV", or also "Airplay", or even some other services as wel?

Best regards
Pieter

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

syamantakomer — Fri, 09 Oct 2020 11:59:44 GMT

Hi Pieter,

Thanks for providing the link!

Before I suggest anything, could you confirm below details.

How many Apple TVs or other bonjour service related devices you have?
Are these devices connected to wired network or wireless?

Regards,
Syamantak Omer

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

pieter_schepens — Fri, 09 Oct 2020 14:47:05 GMT

Hi Syamantak

Thanks a lot for looking into this!

Apple TV's: more or less 80, divided into 10 VLAN's (a /27 subnet per building/zone)
In some buildings they are all connected with ethernet, in other buildings it's a mix of wired and wireless connections (wireless = in a separate WLAN, but with a VLAN override per building; same VLAN's as the wired Apple TV's)
all the teachers' devices are connected to one oher WLAN (one VLAN)
the Bonjour Gateway rules advertise the Apple TV VLAN's to the one VLAN of the teachers

Regards
Pieter

Re: Bonjour gateway on AP: enable on all AP's, or just on a few?

syamantakomer — Tue, 13 Oct 2020 18:16:00 GMT

Hi Pieter,

Sorry for the delay in response.

Try below and see if that fixes the issue.

Since you are overriding the VLANs for different buildings, you have to first gather the data and then create the bonjour policies.
Notedown the VLAN used on individual buildings for apple TVs.
Now create and enable the correct bonjour service with correct VLAN mapping for individual buildings.
Since you are going to use bonjour fencing, choose 1-hop option while creating policy and also map to specific building APs or you can also map it on AP group level.

Post following above, if you are still seeing issues, please open a case with support and they will help you with the further troubleshooting.

Regards,
Syamantak Omer