The Cisco 5520 WLC physical Visio shapes are in the following download (dated 3 July 2017): https://www.cisco.com/c/dam/assets/prod/visio/visio/product_visio_icon0900aecd8009494a.zip ... View more

See the 10Gb transceiver compatibility matrix below which lists supported transceivers and minimum required software versions. Cisco 10-Gigabit Ethernet Transceiver Modules Compatibility Matrix - Cisco ... View more

It is difficult to answer your question without a lot of additional information. Ideally a site survey should be performed based on your coverage and density requirements which will also identify any RF challenges (physical and/or transmitter interference) in the environment which will help determine if internal antenna APs are suitable or if some external antenna APs are also required (and the type of antenna). The survey would need to be done for 2.4Ghz and 5Ghz. The clients you will be using must also be considered as they will support different wireless standards (eg 802.11e/k/r/v 802.11ac wave 2, number of spatial streams etc) and have different receiver sensitivity and transmit power characteristics affecting their connection capability and quality. For example, if none of your clients support 802.11ac wave 2 then buying APs that support this may be overkill (unless you want to future proof the solution). Besides the RF considerations you also need to consider connectivity (switch type, interface speed and type eg mGig) and power (PoE supported eg 802.3af or 802.3at etc). The following provides a comparison of the features of all Cisco APs: Access Points - Compare Series - Cisco The following design guide goes into a lot of detail regarding the points above as well as looking at application requirements. Although the guide is for high density deployments the information can be helpful for most wireless deployments. Wireless LAN Design Guide for High Density Client Environments in Higher Education - Cisco ... View more

Have a look at the Enterprise Design Guide below which includes detailed diagrams and descriptions of the various FlexConnect switching options. Enterprise Mobility 8.1 Design Guide - FlexConnect [Cisco 5500 Series Wireless Controllers] - Cisco ... View more

You need to use a certificate on the guest portal that is trusted by the device connecting to it. For guest this is likely to be any type of device and not managed as part of the enterprise environment so you would need to obtain a certificate signed by a public CA (Certificate Authority) such as VeriSign which device manufacturers include as trusted in their OS. The certificate is based on a Fully Qualified Domain Name (FQDN). If you already have a wildcard certificate for a website you may be able to use this. Acquiring a certificate like this will require an annual fee to renew. You will also need to ensure DNS is setup so that the guest is redirected to the FQDN that is used in the certificate. If the devices are managed you can use an internal CA, however, this is unlikely for guest. Not ideal, but you could also manually install the self signed certificate in the guest device so the warning is no longer presented but again this is unlikely to be suitable for a guest network. ... View more

This can be configured manually in Windows or centrally via Group Policy. There is an option to automatically connect to the network when in range (even if not broadcasting). There is also an option to automatically use my windows credentials. You need to enable these options within the wireless configuration for the relevant SSID (along with other options including authentication etc). You may want to choose user only or user and computer authentication too. ... View more