Depending on your radius server setup, you also have to fill out the Android field "Anonymous Identity" which is just under the Identity (username). Fill it out with the same username. I do more tend to a certificate issue though, or a misconfiguration on the SSID. You have not enabled WPA or TKIP, right? ... View more

Hi Becky Have a read at this awesome guide: https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1250-series/design_guide_c07-693245.html One of the things mentioned there is disabled the low data rates as already suggested. The chapter "Wireless LAN Controller and Feature Specific Configuration Recommendations" contains various tips on how to improve the performance. How is the noise looking on one of the affected APs? Please post the 'show ap auto-rf 802.11b <ap-name>' output. ... View more

Did you try with a second client? It looks a little bit as if the client didn't send a DHCP request. On the other hand, I also dislike this part here: Interface Group was NULL Sounds as if the client wasn't supplied with a VLAN, but I'm not sure. ... View more

Then I'm sadly out of ideas. I guess it's time for a TAC. Can you make sure that those new Aps are in the same AP group as the other ones? Maybe there is a different configuration. ... View more

Can you connect a client with a wire into that affected VLAN on an affected switch and check if you get the correct IP address and if you can ping the gateway? ... View more

Not sure, but check the not supported features on 8.3 for the 2800 series: https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn83mr4.html#ap-wave2 The list is a bit smaller with the latest 8.5 release: https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn85mr3.html#ap-wave2 ... View more

Should be supported, are you running an old (current) 16.3.x version?: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/16-3/release_notes/ol-16-3-3650.html#pgfId-511253 ... View more

This is for the ISE radius server. It allows you to use 25 EndPoints (per AP under C1 licensing, if I understand it correct) on the ISE. ... View more

He probably was out of AP licenses on the primary WLC and needed to buy more. ... View more

No no, those enduser devices have (sometimes) a function built in to randomize their mac-addresses, to counter snooping and movement profiles. Cisco can't do anything here, because it's an end user privacy feature, which Apple and Google (and with tablets/laptops Microsoft) have built-in and enabled for guest networks. The WLC always sees a different client, unless you use username/password authentication on the SSID, or if the end user trusts the SSID. I think the MAC doesn't change, once the user has configured the SSID on his device. ... View more

He wants to go to 8.5.135.0, but the release notes of that version specificly state: If you are using Release 8.4 and want to upgrade to a later release, it is necessary that you upgrade to Release 8.5.105.0 and then move to a later release. Note This restriction is applicable only to Release 8.4 and not any other release. -- That's what is confusing him. ... View more

Little update. My 5520 is running 8.5.131.0 without a problem. The 3504 was RMAd and is now running stable since 18 days. It seems the issue is fixed now, while my old 3504 is now at Cisco for extended troubleshooting. ... View more

You need to enable 'Network User' on the radius server configuration. With this (and only this) enabled, you can use this radius server to authenticate wireless users. ... View more