I shall go through the content and will come back with follow up questions... Really appreciate your support .... a BIG THANKS !! ... View more

Thanks for the clarifications...Thomas .... it is really informative. Specifically could you please elaborate more on machine authentication .. as in how it works..MAC address will be used as credential ..... Which EAP authentication method will be used etc..? Also can we combine machine authentication with user level authentication to control which users can login through authenticated machines. Additionally for profiling do we need ISE plus/advance license... ? For guest, i am unable to understand the difference between self-registration and device onboarding & provisioning. Could you please help what is the exact working & differences between the two or any link which I can refer about all these scenarios....  As I understand, for self provisioning also guest will be redirected to a page where he will provide his basic details before getting an authorization. What enhancement onboarding & provisioning will provide to guest ? ... View more

Right now this ISE requirement is for a sinlge site wireless users meaning no branches etc. no VPN users Their intention is to use Wireless as primary means of communication even on the desktops. Currently they have around 400 desktops + Laptops .. all windows 8 & above, 100 personal devices (Android + iOS) and 10 to 20 Guests visitors in a day. For internal employees, customer is looking for wireless security which can help him achieve high security standards like two factor authentication (not tokens) as well as to keep control on what I mentioned previously i.e. controlling the personal device login which generally are not part of AD domain. I believe certificate is one of the way to control these type of personal devices since they wont have certificates .. they wont to be able to access the network..... please let me know if there are other simpler ways. Having said that there would be VIP mgmt. users on the other hand who can not be denied access and would require access to enterprise wireless through their personal devices which would not be part of domain.... I am getting little confused about all such scenarios...as I have no idea of ISE implementation use cases. For Guests, he wants differentiated access with sort of self provisioning forms where in user can provide his personal details and can get the password through SMS... I believe this can be achieve through ISE.. but don't know whether Base license will be sufficient or Advance would be required. Guests will be provided Internet only access. ... View more

Hi Vivek, To avoid such problems only, I want to avoid this kind of topology and want to reduce the number of switches in a single ring topology. I agree to your point also that broadcasting can make even a two switch network bog down in matter of seconds. The design that I discussed in my question is just a base idea from consultant which he has put forward. I'm seeking community's help to gather some good technical facts which I can use to bring to design team's knowledge so that we can remove any design flaws well in advance. Apart from broadcast issue, do you feel there can be other caveats which strictly discourages this ring design. I have heard but not sure that we can have only 7 switches connected in a cascaded fashion. I"m still trying to find something concrete on this limitation. ... View more

I had the same issue yesterday while working on 6921 and CME 8.6 running on Cisco ISR G2 2951. Whenever i was trying to make a confrence or was trying to tranfer a call in "Full Consult" mode, it was displaying "Feature has been disabled on the phone". Solution that worked for me: Under ephone configuration run the command "type 6921" and restart the ephone. "Type 6921" command will automatically allow the max-phone calls per button to 2. If you still face any issue, you can try updating the cnf files under telephone-service and restrating the phone again. I hope this works for you too  !! ... View more