We are trying to setup an eduroam ssid, and I would like wlc to forward clients to ise cwa so that I can display our aup. I can get all of this working using 802.1x as the authentication policy can have an external radius server as a proxy service. However, when the client gets redirected to the cwa, I can not figure out how to use the external radius server as a auth source. I can chose any of the external identity sources in the portal config, but i cant input eduraom settings into any of those.. Is this possible? ... View more

We are testing the mydevices portal to let students register their devices for use on wireless. When I search for my mac address I am testing with, I do see that it is in the correct endpoint group. However, I cant seem to find any owner info. There is a doc that explains adding a column of user within Administration > Identity Management > Endpoint Identity Groups  I just have Mac address , Static Group Assignment , and Enpoint Profile So the question is where do I find the owner of a device registered from the mydevices portal? ... View more

Currently running 1.4 patch 3. After a sponsor creates a guest account, that guest can not auth due to it being marked as disabled in the internal database. A couple of people on the forums had this problem, but the solutions for 1.1 and 1.2 dont match up with 1.4. Can someone help me with troubleshooting this? Also, should I see the guest accounts, either daily, weekly, or contractor in Identity Management>Groups>User Identity Groups? ... View more

We are running Cisco 4500 chassis at the access layer, and have been for a few years without issue. Recently we started to experience issues where a mac address will just randomly "jump" to another port. User will call us and say their computer is not working. We will locate the mac, and its showing on the wrong port. We shut that port, do a no shut, and the mac jumps back to the correct port. In the example below, the mac address jumps to port 3/2, but is physically connected to 2/12. !--issue before shut/no shut mdf#show mac address-table | inc 9ebf  236      782b.cb8c.9ebf    static ip,ipx,assigned,other GigabitEthernet3/2   !--port security knows the correct info however mdf#show ip dhcp snooping  binding | inc 9E:BF 78:2B:CB:8C:9E:BF   xxx.xxx.236.193   76145       dhcp-snooping   236   GigabitEthernet2/12 mdf#show mac address-table int gi2/12 Unicast Entries  vlan     mac address     type        protocols               port ---------+---------------+--------+---------------------+------------------------- 3908      20bb.c021.ae58    static ip,ipx,assigned,other GigabitEthernet2/12   !--ip phone   mdf#show mac address-table int gi3/2 Unicast Entries  vlan     mac address     type        protocols               port ---------+---------------+--------+---------------------+-------------------------  236      1803.7339.d93d    static ip,ipx,assigned,other GigabitEthernet3/2           236      782b.cb8c.9ebf    static ip,ipx,assigned,other GigabitEthernet3/2         !--mac in question  236      782b.cb8c.c366    static ip,ipx,assigned,other GigabitEthernet3/2          3908      b414.89a2.2ae0    static ip,ipx,assigned,other GigabitEthernet3/2    !--fixing issue mdf(config)#int gi3/2 mdf(config-if)#shut     !-- issue resolved mdf#show mac address-table | inc 9ebf  236      782b.cb8c.9ebf    static ip,ipx,assigned,other GigabitEthernet2/12   Switch is running cat4500e-entservicesk9-mz.151-2.SG2.bin , but also happened on cat4500e-entservicesk9-mz.151-2.SG4.bin and cat4500e-entservicesk9-mz.150-2.SG4.bin. Other switches have also had this issue occur. ... View more

We are pretty new to CCX, and want to get silent monitor and call recording working. I've read a bunch of troubleshooting docs, and a bunch of the discussions here, but I am still unable to get it to work the way that I want. Heres the setup. The phones are all set to the recommended settings, and the agent pc is plugged into the phone. The data vlan is 111 and the voice vlan is 222. When I run the nicq prog on the agent pc, it can not find the phone, but I can enter the ip in , and it sees the phone. The supervisor laptop can not monitor or record. If I change the voice vlan to 111, nicq still can not find the phone, but the supervisor can record and monitor with no problem. Is is an issue with 802.1q and perhaps my nics do not support it? CCX Ver: 8.5.1.11004-25 ... View more

We are set to deploy a few hundred 8945s. CUCM is set to enable video, but I'd like for every phone to not auto transmit video. I see in the preferences of the phone that you can turn auto transmit to off, which would make the user push the video mute button to enable video on the call. What I do not see is an easy way to have this option set to off by default when deploying the phones. Are there any easy solutions other than manually changing the setting on every phone? ... View more

In acs, we are able to see the username and some other info about the user authing, but what I am unable to view is IP address, and mac address. Is it possible to have the wireless controller send over that info in radius and to be able to view it in acs? ... View more