Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
A couple years late here, but wanted to post in case someone else comes across this.Another command you can add is "aaa authorization exec default local" which - in tandem with your configuration above - should allow the exec access you are looking f...
Good catch! On this note, the Cisco Wireless Solutions Software Compatibility Matrix covers this topic and is super useful for not only troubleshooting but also for planning new deployments.
TL/DR: Solution is to enable ARP Broadcast on the VLAN (Configuration>Layer2>VLAN) -OR- Use the VLAN ID rather than Name from the dropdown menu in the policy configuration (Configuration>Tags&Profiles>Policy | Edit Policy Profile>Access Policies: VLA...