You're missing either device tracking or DHCP snooping. At least that's not within the config you're showing us.

First of all, you'll need the file ise-upgradebundle-1.1.x-to-1.2.0.899.i386.tar.gzAfter downloading, simply follow these instructions: http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/upgrade_guide/b_ise_upgrade_guide/b_ise_upgrade_guide_chapte...

No Problem at all. Just set up the Sponsor Portal to use AD as Identity Store, or set up a new Identity Store Sequence combining local authentication and AD.Afterwards, you can set up a Sponsor Portal Policy to "connect" the AD groups with the Sponso...

Sounds like you rather want to use PEAP/MSChapV2