there is no one-size-fits-all All depends on the size of your network and the number of workstations and printers. and the amount of management you want to put in separating your printers   take into account if you use local printing or centralized printing. with central printing your dat still leaves the floor to the printserver and then returns to the same floor but to the printer vlan   if you only have one-or-two printers per floor, think of the management overhead by creating separate printer vlan's per floor. including subnets with only 1-2 addresses assigned and router-interfaces between vlans   on the other hand, you may use a mechanism to "automatically" assign the printer based on the floor the user(vlan) is connected.     ... View more

try adding bootps in addition to bootpc to the access list ... View more

-> My guess is this outdoor antenna will work with the 881 ( it's the 800 series, not a specific model) Install and Upgrade Guides Antennas for the Cisco 800 Series Routers Cisco 2.4-GHz Swivel-Mount Dipole Antenna (23.7786.51) Cisco Dual LTE-Single GPS Multi-band Antenna Installation Guide Cisco Dual LTE Multi-element Multi-band Indoor Antenna Installation Guide ... View more

look at this thread Where Rasika anwers this question:  So that means that the feature to see client location on Prime maps is not anymore supported in CMX? ... View more

duplicate post ... View more

you should not disable DFS! but you can exclude the DFS channels from the available channels for Dynamic channel selection. ... View more

??? if you configured a fixed channel, and this is not a DFS channel, the AP should not need to switch channels! what channel did you configure and what bandwith! Wider bandwith uses multiple channels! so if only for site survey, stick to 20MHz.   read this document and the advise herein ... View more

Hello Georg, thank for your input. As mentioned I'm trying to move to another model switch with a more recent IOS. our setup is determined some time ago, before I joined this company. the global and interface configuration is basically copied from the currently working environment  the same radius servers are configured (and accessible from the new switch)   But deploying (imaging) new workstations works OK with the 2960-CG and not with the 2960-CX My colleagues mention the 2960-CG is kept on the old version for exactly the same error,  but we need to move on to new hardware and IOS; 15.0 is not listed for the 2960-CX it starts at 15.2(3)E     I look for hints to drill down the issue.   >>>>> aaa group server radius login-servers server name L1 server name L2 ! aaa group server radius nps server name N1 server name N2 ! aaa authentication login default group login-servers local enable aaa authentication login CONSOLE local enable aaa authentication dot1x default group nps aaa authorization console aaa authorization exec default group login-servers local none aaa authorization exec CONSOLE local none aaa authorization network default group nps ! ! aaa session-id common dot1x system-auth-control dot1x guest-vlan supplicant ! !  interface GigabitEthernet0/1 switchport access vlan <x> switchport mode access switchport voice vlan <y> authentication event fail action authorize vlan <x> authentication event no-response action authorize vlan <x> authentication port-control auto authentication violation protect mab dot1x pae authenticator dot1x timeout tx-period 3 spanning-tree portfast <<<<<   ... View more

a possible solution could be  - to create a (sub)interface in each vlan - give both interfaces same security level - enable "allow  traffic between interfaces with same security level" ... View more

search for "visual traceroute" or "vtrace"   ... View more

to confirm the cable type see the FAQ  section password recovery question connect a PC to the console port of the VPN Concentrator using a straight-through RS-232 serial cable ... View more