Hello ,        I have opened the case and discussed this with Cisco representative, below you can see the answers on my questions: Q1.Can you please tell what will happen if the AIR-DNA subscription will expire? This document (https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-11/config-guide/b_wl_16_11_cg/smart-licensing.html#task_k2c_nps_xfb ) tells that on term expiry, you can move to the Network Advantage or Network Essentials license level if you do not want to renew the DNA license. A1. Yes. I  confirm that answer from that document.  When AIR-DNA subscription expired you will move to the Perpetual Network Stack.   Q2.After expiring AIR-DNA licenses, without purchasing any additional licenses, will the device continue working with perpetual licenses? A2. Yes. That is right. Your device will continue to work with the perpetual license which is embedded in the hardware and it is activated by some of the DNA licenses.   Q3. Or do I need manually switch to essential or advantage licenses? A3. No, this is not necessary to be done. Just, after expiration of the DNA E/A/P licenses, you will use the device without  DNA features and this is why we have the perpetual license   Q4.What features does Network advantage and essentials includes? A4. For more details about Perpetual Network Stack refer here(page 10,24,25,26): https://www.cisco.com/c/dam/global/da_dk/assets/training/seminaria-materials/Licenses-Networking-for-everybody-with-DNA.pdf   Q5.After expiration of AIR-DNA license, can I add new Aps? A5. Yes, you can and how many new APs to be added depends on what kind of type WLC do you have.   Q6.Does after restarting existing APs, will they reconnect to WLC back? A6. Yes, they should be able to connect again.   ... View more

thank for the response.   there is only two licenses available when you are purchasing products , these are: AIR DNA Essential (AIR-DNA-E) AIR DNA Advantage (AIR-DNA-A)   after expiration of above mentioned subscriptions: The AIR-DNA-A and AIR-DNA-E are the available license levels on the controller. You can configure as AIR-DNA-A or AIR-DNA-E license level and on term expiry, you can move to the Network Advantage or Network Essentials license level, if you do not want to renew the DNA license. (https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-11/config-guide/b_wl_16_11_cg/smart-licensing.html#task_k2c_nps_xfb )   it means that i will loose DNA features, but Network Advantage or Network Essentials will continue working. These Network essentials and Network advantage components are perpetual and is valid till the life of the AP.   the only thing i am interested is what does includes Network Advandage and Network Essesntials liceses in Wireless Controllers? there is not document which describes that new APs may be unable to join the WLC as well as APs that have restarted.   p.s new ax series costs much expensive then 1815i. ... View more

hi,  we have already configured this option : user account lockout, but customer needs to add additional security at wireless layer, to avoid offload the LDAP. one option i think will be use radius server between LDAP and WLC and sent client exclusion attributes from the radius server itself.  if you have any guide for this typof config will be great :) ... View more

hello,  can you please tell me the duration time for three consecutive failures? in what time period should hacker try three consecutive failures? 3 tries during one minute or time does not meters, if there will be three consecutive failures during any time , client will be blocked? ... View more

hi ,  cisco wlc has Client Exclusion Policies, one of that policies is "Excessive Web Authentication Failures" it offers client exclusion  after three consecutive failures. refer to this doc: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0111010.pdf  my tasks are : 1) somehow control failure counters, for example i need to exlude clients after 5 consecutive failures, or choose any other number. 2) control the time between failures, in default configuration if 3 failures occur during one minute wips will exclude client at fourth try, but i need to increase this duration to 5 minutes. in this case if user fails authenticate 5 times , it will be excluded. ... View more

hello everyone, recently we purchased cisco aironet AIR-AP1141N-E-K9 standalone model and couldn't achieve more then 144 Mbps PHY rates.  channel with is set to 40 MHZ, but  stil remains at 20mhz with.   can you please tell me if it possible to enable 2ghz channel bonding on this device? many thanks ... View more