You could use 802.1X with the Microsoft NPS as a RADIUS server. This comes at no monetary cost but is also not very usable. There are open-source RADIUS servers like FreeRadiusthat could be used or PacketFence. But you will not reach your initial goal that only domain joined PCs can join the network. Every user with an account can join from any device he wants.
... View more
This is a client decision and can never be totally avoided. I would typically accept it if it happens now and then, especially if it is only temporary and not permanent. Often enough, a client will move back to the better AP after some time.
... View more
Better describe what you intend to achieve. For me, this doesn't make any sense. However, it could be controlled by a RADIUS server that refuses the connection when attempted on this specific AP.
... View more
AnyConnect took six years from the announcement to release. I won't hold my breath, but I would be happy if it came sometime after MXv19.
... View more
The first troubleshooting step is to factory reset the AP. If nothing changes, open a case. This should not happen and perhaps the AP has a defect.
... View more
This is the UUID (based on RFC 4122). Yes, there was a reason when this was shown ... But I forgot it. Perhaps I remember (or even better, someone else knows it).
... View more
Use 802.1X and each device has either it's own username or it's own certificate. But even with randomized MACs you should be able to see the device name:
... View more
You don't say what you are missing. But basically you need two things in addition to you actual setup: An additional rule on the ISE to match the AD identity group "Domain Computers" The supplicant needs to be configured for "computer-authentication" or "user- and computer authentication".
... View more
1) No 2) No 3) I would assume that the MG51E with the Omni Antennas (included and don't have to be ordered separately) can service this use-case better than the MG51 as the truck will likely turn directions, and the Omni works in all horizontal directions.
... View more
As @ww said, an enterprise authentication method would be best. iPSK with RADIUS would also work. The Problem is that all VLANs must be available at all locations, which typically makes no sense. What is the goal you want to achieve?
... View more
