Here are some docs that should help.     https://www.cisco.com/c/en/us/td/docs/wireless/controller/5500/white-paper/apple_bonjour/apple_bonjour_services/apple_bonjour_services_chapter_01.html   https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1100-series-access-point/113443-cuwn-apple-bonjour-dg-00.html   https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-0/WLAN-Bonjour-DG.html     ... View more

So, I am running a 3.1 VM and a 3.5 VM, side by side to compare.  In 3.5, I actually have two wireless site maps features.  One appears to be the same thing that is in 3.1, the other is a newer view of the maps.  The old site maps view says "deprecated" so I am guessing that they are phasing that out.  The first question I have is do you have the same thing in 3.4?   The icons representing the APs have changed from 3.1 to 3.5.  The icons show the individual radios, which is kind of cool.  I am looking at a map where I know that there is an AP down and it is still on my map.  The icon is red and when I hover over it, it says its disassociated from the controller, exactly as I would expect.     You case of a disappearing AP may indeed be a 3.4 thing.  But that would give me reason to skip 3.4 and upgrade to 3.5. ... View more

I am running 3.1 right now.  looking to upgrade to 3.5.  I will have to test this to see what happens. ... View more

It's true, it didn't happen before and I wouldn't want it to happen now.  Usually, when an Ap is down or is removed from the controller, Prime is supposed to show the AP as down and turn the AP icon red on the map.  I wouldn't want it to be removed from the map, because the map shows where the AP is at, down or not.   ... View more

I have had some discussions with my Cisco account Rep and TAC.  Here is what I have learned.  I am currently running ISE 2.3.  The Max user sessions is applied to ALL users, including users on external groups.  So, what we did is we figured since there shouldn't be any users that are on more than one device at a time, we just turned on the setting.   What we have discovered is that when our network monitor logs in via tacacs to our switches, it kills it because it tries to login to many switches with the same creds at the same time and the max user session only allows x amount. The max user session is global per ise server or ise cube if you have multiple servers clustered.  So, what we had to do was build another Ise server for tacacs, with max user sessions off.   According to my Cisco Rep, Getting this setting to work per AD group (in ACS it was called group mapping) is a very low priority and it sounds like Cisco really doesn't care to re-introduce group mapping into ISE due to low demand.  This is very unfortunate as we paid a bunch of money to migrate to ISE, only to find that features were taken away.    On top of it all, we are seeing issues where ISE is applying max user sessions even though the client has no sessions and is stopping people from getting on.  It appears to be a radius accounting issue of some type and we are working with TAC on it.  From a customer perspective, I paid a bunch of money to go to ISE and in return I got headaches and problems.  This is not what I pay money for.  I am not a fan of ISE at all.  ... View more

Hi all, I have the same issue and the same question. Where is the group mapping feature that I used in ACS? I have opened a TAC case since I am right in the middle of building an ISE environment. It is the one thing I am having a hard time in migrating over. Everything is working as expected, including TACACS. So, I will be posting to you what I find out in my TAC case. ... View more

Yeah, I already found that in my previous post and got EAP-TLS working for machine authentication. ... View more

Looks like this is what is going on.  https://support.microsoft.com/en-us/help/904943/authentication-may-not-succeed-when-you-use-peap-ms-chap-v2-as-the-authentication-method-for-an-802.1x-connection-in-windows-vista,-windows-xp,-windows-server-2003,-and-windows-2000 ... View more

ok, I found the issue.  Infact, all of my controllers are set to 600 seconds.  The CLI says one thing, the GUI says another.  Bug CSCuw27160 . Looks like it's fixed in the 8.2 code. ... View more

In looking at the controllers, it appears that this setting is set per band, 2.4GHz vs 5 GHz.  Some controllers are set to 300 sec as the group interval, on both bands, others are set to 600 on both bands.  Others are set to 300 on one band and 600 on the other. They are all on the same RF group and they are all set to auto in the RRM RF grouping on both bands. I really have not seen any issues and I don't know how long this has been like this.  I am just auditing and noticed these differences.  So, if best practice is to set at 600 seconds for both bands, I would like to do that. ... View more

That is what I am trying to do, but I really can't fine any documentation on how. ... View more

I supposed it could be a bug, but then why is it only affect interfaces 1-4 on one switch and not all 3 switches in the stack?  They are all running the same code. This interfaces are not in a module, these are the first four interfaces on a 48 port switch.  Now I did notice that there was a power outage 4 days ago.  I guess its possible that something happened, but I am still leaning toward a hardware failure.  I will reboot the stack tonight and see what happens. ... View more