We've had an s170 installed for over a year now. We're using NTLM authentication with 2 CDA servers. We're running into an issue, and the answer seems to be to purchase ISE, but I don't think management is going to go for that.
So, we have people who start out the day docked. Their lan interface gets an IP address, they authenticate with the domain, and the CDA obtains the username to IP mapping. Great.
Now, said user decides to work wirelessly because of a meeting. The user now has a new IP address, which is not in the CDA due to them not authenticating with the new IP address. I know one work around is having the Ironport to display the credentials page, but that would be a major pain for our users.
Can anyone provide any solutions for this issue?