Hello,   I am facing a challenge. Ones I am done with omboarding process via BYOD, Cisco ISE issues 2 certificates. One based on certificate template and second with SERIALNUMBER. This becomes to be a problem when I want to connect a device to the SSID with EAP-TLS as I must choose one of those. I would like to avoid such situation and get device to connect to the SSID automatically.   Please see the attached picture   ... View more

Hello, I am trying to set up SSO but I struggle to activate RP ports. I have connected them via fiber to swiches in the same vlan and I do not get any link. I do not see that RP port as available port in Web Gui menu redundancy config.  I have attached a picture. What I do wrong ?   Thanks for any help. ... View more

Hello,   I am going to install 9800-80 for the first time but I am confused about SSO. I found this guide https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213915-configure-catalyst-9800-wireless-control.html which tell about SSO with back-to-back connectivity. Whereas the presentation from Cisco PVT in amsterdam tells that it is IMPORTANT: connect RP port to the VSS switch and not back to back!   What is a proper way to do it with 9800 ? ... View more

Hello, We are going to use Microsoft Intune as MDM and we would like to utilize EAP-TLS for devices. The provisioning has to take place without BYOD onboarding proccess in ISE as we are going to give devices to other people to do provisioning and then they will send them to us. As we know EAP-TLS requires identity store like AD to compare CN or SAN etc in a certificate, in order to check if presented values match. In case of Windows machines we use AD without any MDM.   Azure/Intune keeps many values like serial number, mac address etc, so since we do not store those values in on-premise AD it would be nice to grab them from Azure. I just wonder if it is possible to connect ISE to external identity group in Azure/Intune and use certain values like mac address, serial number etc.... I have tryed to configure Saml ID providers and I can pull all groups from Azure/Intune but I can not use SAML ID  in Identity Source Sequences.   ... View more

Hello everyone,   I want to run Office extend with 1815T. I see in the logs on the controller that CAPWAP Control Msg Received from x.x.x.x but DTLS connection 0xa443cb8 closed by controller *spamApTask5: Jul 23 11:56:45.306: CAPWAP DTLS connection closed msg I assume that I need a DTLS license on that controller. I have downloaded one from cisco but I have no idea where I should install it. I do not see that option in menu Licence. I have a version 8.5. Many blogs refere to management-licence--command but there is no such option.   ... View more

Hello, I know that an AP i going always to see a client better. According to Jerome Harry is about 6dBm difference. I have taken the reading from the controller and I struggle to make out what is what, since the values are the other way round. The client see the ap better or I get that wrong. Can you please help me to interpretate the show client details what is, 1. Radio signal strenght indicator 2. Nearby Ap statistics 3. Scan report     --More-- or (q)uit Number of RA Packets Dropped............... 0 Number of Policy Errors.................... 0 Radio Signal Strength Indicator............ -66 dBm Signal to Noise Ratio...................... 33 dB Client RBACL Statistics: Number of RBACL Allowed Packets............ 0 Number of RBACL Denied Packets............. 0 Client Rate Limiting Statistics: Number of Data Packets Received............ 0 Number of Data Rx Packets Dropped.......... 0 Number of Data Bytes Received.............. 0 Number of Data Rx Bytes Dropped............ 0 Number of Realtime Packets Received........ 0 Number of Realtime Rx Packets Dropped...... 0 Number of Realtime Bytes Received.......... 0 Number of Realtime Rx Bytes Dropped........ 0 Number of Data Packets Sent................ 0 Number of Data Tx Packets Dropped.......... 0 Number of Data Bytes Sent.................. 0 Number of Data Tx Bytes Dropped............ 0 Number of Realtime Packets Sent............ 0 Number of Realtime Tx Packets Dropped...... 0 Number of Realtime Bytes Sent.............. 0 --More-- or (q)uit Number of Realtime Tx Bytes Dropped........ 0 Nearby AP Statistics: bkom-atealab-ap01(slot 0) antenna0: 9 secs ago..................... -64 dBm antenna1: 9 secs ago..................... -63 dBm bkom-atealab-ap01(slot 1) antenna0: 248 secs ago................... -64 dBm antenna1: 248 secs ago................... -75 dBm atealab-test1(slot 1) antenna0: 72 secs ago.................... -70 dBm antenna1: 72 secs ago.................... -74 dBm atealab-test2(slot 1) antenna0: 248 secs ago................... -89 dBm antenna1: 248 secs ago................... -96 dBm Scan Report: -------------------- BSSID:......................................... f4:cf:e2:40:7f:ff RSSI:...................................... -68 dBm ChannelNumber:............................. 36   thank you ... View more