EWC on 9115 APs and support for bonjour

[3dmaxer]

I'm trying to get bonjour working on my wireless network running EWC with 9115AXEs running version 17.11.1 and not having any success with wireless clients being able to connect to any of the airprint devices including ones on the same subnet.  I have tried configuring and enabling mDNS, but have read in a Cisco doc that 9100 series APs running EWC need to have mDNS in a disabled state; is this still true?

My goal is to get bonjour working across two wireless subnets as well as on a wired subnet on a SG550X switch, is this doable?

[Flavio Miranda]

Hi @3dmaxer 

 For Bonjour on the EWLC this guide can be helpful.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-1/WLAN-Bonjour-DG/WLAN-Bonjour-DG.html#pgfId-51589

About use the wired and wireless network need to be test. I would say is possible if they keep on the same network.

[3dmaxer]

Hi Flavio,

Thank you for the link, nothing in there I have not already tried.  All they docs I have come across are either dated, or not geared for the embedded controller which is more limited in options.

With mDNS enabled and the WLANS set to Gateway mode, I can see all the services if I do a monitor mDNS.  However, if I try to access them on say an iPad or other apple IOS device, it times out.

I'm apparently missing something in the configuration to get this working.

[marce1000]

                    >...I'm apparently missing something in the configuration to get this working.
   - Have a checkup of the EWC controller configuration with the CLI command show tech wireless ; feed the output into :
                                               https://cway.cisco.com/wireless-config-analyzer/

  M.

[3dmaxer]

Hi Marce1000,

I ran the check and the only issue that came back was this:

mDNS: WLAN is using mDNS gateway functionality, but not corresponding SVI Interface detected.

For the action, it tells me this:

Add: Define a Interface vlan (SVI) for all vlans where mDNS gateway functionality is required. This check may not apply on AAA override scenarios

I'm using Microsoft NPS for authentication and assigning a VLAN at the time of login, so I believe this issue does not apply.

This Note in the document you referenced also has me unsure if I can run my 9115 APs in embedded mode with mDNS Gateway enabled as stated here:

mDNS gateway must be globally disabled on Catalyst 9100 series Access Point in EWC mode.

Is this statement based on some specific configuration, or is this saying if you have this series of AP running in embedded mode - you can not have the mDNS Gateway enabled?

[marce1000]

    - The latest documentation seems to be : https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/17-11/config-guide/ewc_cg_17_eleven/m_local_area_bonjour_ewc_ap_mode.html?bookSearch=true 

                       - Scrutinize the beginning parts of the document too as in : 
  

• Overview of Local Area Bonjour for Embedded Wireless Controller - Access Point Mode
• Restrictions for Local Area Bonjour for Embedded Wireless Controller - Access Point Mode
• Prerequisites for Local Area Bonjour for Embedded Wireless Controller - Access Point Mode
• Understanding EWC Mode mDNS Gateway Alternatives

 M.

[Rich R]

According to table 6 https://www.cisco.com/c/en/us/td/docs/wireless/access_point/feature-matrix/ap-feature-matrix.html#_Toc118737963 it should work.
Presume you've been though https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215352-configure-and-troubleshoot-mdns-on-catal.html ?

mDNS gateway did require an SVI on the WLC to work, which is not possible on EWC, so that could have been a limitation prior to 17.9.  As per https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html#Wirelessclientinterfaces the SVI is no longer required from 17.9 so you should be ok on 17.11 ... but 17.11 is a limited support feature release (no bugfixes) so you should consider using an extended support release like 17.9.3 (and 17.9.4 out soon) and then look at 17.12 when that's been released for a while to ensure you keep getting the latest bug fixes. 

Also check https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html#Multicast

[3dmaxer]

Hi Richard, I have installed 17.9.3, but no difference.  As for the other docs, I have gone through them but nothing new seems to jump out.  As for the multicast doc - do I need to have multicast enabled if mDNS is active?

[Rich R]

I would assume so but haven't implemented it myself so can't say for sure - can't do any harm to try?

[3dmaxer]

OK, I have enabled multicast - but that did not do fix the issue.  In reviewing the docs again, it mentions this:

"Ensure that the controller runs a valid Cisco DNA-Advantage license."

When I check the licensing on my EWC, I have the following:

AIR Network License = air-network-essentials

AIR DNA License= none

Could these services not be working correctly due to my licensing level?

[Rich R]

I believe that only applies if you want to configure it from DNA center.

[3dmaxer]

Ok thanks, grasping at straws now…

[marce1000]

  You could have a go with a virtual 9800 as a reference test , if that works , then it's a EWC limitation , the 9800 vwlc can be freely downloaded ,

 M

[D-KA]

Have you been able to find a cause for the problem in your case?
I have a similar behavior on my 9120AXI's. Airprint gets timeout, but Airplay works. weird....

[3dmaxer]

D-KA I have not been able to get this to work.  I have set up a lab to duplicate my production environment, but have not had time to work further on this. 

Please let me know if you get a working solution.