MSM7xx Controllers Configuration Guide v6.4.0

For example:
• If you define a Bonjour inbound filter to block all Bonjour announcements on a particular VSC,
then no wireless clients using that VSC will be able to send Bonjour announcements. (Inbound
traffic is traffic received by an AP from a wireless client.)
• If you define a Bonjour outbound filter to block all Bonjour announcements except printing
services on a particular VSC, then all wireless clients using that VSC will only receive Bonjour
announcements advertising printing services. (Outbound traffic is traffic sent by an AP to a
wireless client.)
Filter settings are stored in a Bonjour filter profile. Up to 10 profiles can be defined, each targeting
specific Bonjour announcements. Once a filter profile has been defined, it can then be assigned
to a VSC, AP, or user profile.
Each Bonjour filter profile is composed of one or more rules. Each rule lets you target a specific
type of announcement, allowing it to either be forwarded or blocked (discarded). Rules are evaluated
in the order that they appear in the profile list. Any announcements that are blocked by a rule are
not available to the rules that follow it (and by extension, to other profiles).
NOTE:
• Bonjour filters (and their rules) do not block the connection between two devices, they only
stop the discovery of Bonjour services. If a wireless client knows the IP address of a device
providing a service, it can establish a connection with that device without using Bonjour.
• Bonjour filters only stop the discovery of services advertised using the Bonjour protocol. If a
service is also advertised by some other discovery protocol (such as uPNP), it can still be
discovered using that other protocol.
Filter evaluation
When working with access-controlled VSCs
Filter profiles can be applied in a VSC and in user account profiles. For each Bonjour announcement,
filters are evaluated in the following order:
1. User profile (with filters either defined locally on the controller or configured via attributes in
a user’s RADIUS account)
2. VSC
3. Default filter
NOTE: Until an access-controlled user is authenticated, all Bonjour traffic is blocked.
When working with non-access-controlled VSCs
Filter profiles can be applied in a VSC, in user account profiles, and at the AP level. For each
Bonjour announcement, filters are evaluated in the following order:
1. User profile (defined locally on the controller or via the user’s RADIUS account)
2. VSC
3. AP level (All APs or AP group or individual AP)
4. Default filter
Defining a filter profile
Do the following to define a filter profile:
Bonjour traffic filtering 239