Configuring Access Guardian Bring Your Own Devices (BYOD) Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-128
Simple Service Discovery Protocol
The Digital Living Network Alliance (DLNA) is a standards organization that defines the guidelines for
multimedia devices. It also certifies communication between devices allowing them to discover and
recognize each other and share digital content. DLNA uses Universal Plug and Play (UPnP) for media
management, discovery, and control. DLNA/UPNP uses the Simple Service Discovery Protocol (SSDP) to
discover services, similar to Bonjour using mDNS for the same purpose. In the AirGroup solution, the
WLAN controller acts as Bonjour and DLNA gateways allowing Layer 2 discovery protocols, such as
mDNS and SSDP, to extend across Layer 3 boundaries through the gateway.
Along the lines of zero network configuration already supported by the OmniSwitch with mDNS, support
of SSDP Relay for DLNA/UPnP enables the OmniSwitch to allow non-Apple devices to also discover
services with minimal configuration by the administrator.
• DLNA/UPnP uses SSDP for dynamic discovery of services.
• The WLAN controller AirGroup feature has support for DLNA and acts as a DLNA controller, in
addition to the support for mDNS.
• Similar to the OmniSwitch implementation of mDNS, the OmniSwitch relays SSDP packets to the
WLAN controller through a Layer 2 GRE tunnel.
How SSDP Relay Works
All the SSDP packets coming in on an OmniSwitch are intercepted and tunneled through a GRE tunnel to
the WLAN controller (acting as a gateway). The GRE tunnel is setup between the switch and the WLAN
controller to tunnel both mDNS and SSDP frames. Similarly, traffic towards the SSDP clients/servers are
sent back from the WLAN controller to the switch through the GRE tunnel. The reverse traffic is also
intercepted and then sent unicast or multicast from the switch to the respective ports.
Messages Received by the OmniSwitch from Wired SSDP Devices
SSDP messages coming from wired SSDP service devices are relayed from the OmniSwitch to the WLAN
controller using the associated GRE tunnel interface. The WLAN controller only supports Layer 2 GRE
for SSDP, so frames sent from the OmniSwitch are encapsulated as follows:
Messages Received by the OmniSwitch from the WLAN Controller
SSDP messages coming from the WLAN controller through the Layer 2 GRE tunnel interface are relayed
towards the client device. When the OmniSwitch receives the encapsulated packets:
• The original SSDP frame is extracted from the GRE packet with the Layer 2 header.
• The switch obtains the VLAN ID from inside the 802.1Q header of the SSDP frame and floods the
frame on that VLAN (untagged or tagged based on the egress port frame) towards the client.
DA-MAC
Gateway MAC to reach
WLAN controller/
WLAN controller MAC
SA - MAC
OmniSwitch MAC
IP Header
Src IP: OmniSwitch IP
Dst IP: WLAN controller IP
IP protocol: GRE(47)
GRE VER 00 00
GRE TYPE 00 00 (indicating L2
frame in the payload)
Payload
SSDP frame from the
wired service/client
(appended with 802.1q
tag)