Hi all!
I would like some advice regarding DNA, 9800 WLC's, ISE and NPS.
We currently have an HA 9800-CL WLC pair in our data centers controlling AP's across multiple sites in flex-connect mode. All wireless networks are locally switched except a guest network which is centrally switched. We have a captive portal configured in ISE for guest authentication which links to NPS also. We have a network which uses 802.1x device certificates for authentication back to the NPS in the DC's.
The 9800s are linked to DNA for monitoring/assurance purposes only right now.
We want to start using DNA to configure and control our WLC's but at the same time we want to de-centralise the wireless controllers using 9800-CL VM's or perhaps the 9800 controller add-ons for 9300 switches at each of our sites. We will configure NPS locally for each site (for certificate access network), but retain the central ISE (for guest network portal). I believe turning all wireless networks into centrally switched to the local controller will also be of benefit.
Can anyone point me in the right direction for a design document/s to assist with this in the first place? I've been searching but most things come back with SD-Access config documents.
If not I'll start asking more specific questions
