We are looking at setting up BYOD using ISE. We already have a guest SSID configured and plan to use a new BYOD SSID (single SSID method). My question relates to the DNS name and certificate configuration for the BYOD registration portal.
My original thought was to set up a new DNS name/certificate for BYOD, so it would be different from the guest access, e.g.
guest.company,com
byod.company.com
But default the guest and BYOD portals use the same port 8443 and therefore have to use the same portal group/certificate.
This got me thinking what if any is the technical/security benefit of using different DNS name?
What about BYOD Retry URL? Would it cause an issue if this pointed to the guest DNS name?
