As @ww said, an enterprise authentication method would be best. iPSK with RADIUS would also work. The Problem is that all VLANs must be available at all locations, which typically makes no sense. What is the goal you want to achieve? ... View more

OWE gives you wireless encryption without authentication, and the Splash page gives you authentication without wireless encryption. Combining both leaves you individually vulnerable to attacks on the other. An attacker on the wireless side can still make himself a MitM to interact with the wireless data in cleartext form.   If it is for internal users (as you are talking about AD login), implementing 802.1X is the only secure way to combine both. ... View more

I still don't get what you want to achieve. Do you want to provide Internet for the other side through the MX? ... View more

GPOs are configured from the DomainController. ... View more

You have to push a WLAN config to the devices, for example by GPOs. There you can set the authentication to use SSO with the Windows Login. Based on the Windows version you perhaps have to disable Credential Guard in Windows. ... View more

You need antennas for the AP. With which antennas did you plan?  ... View more

A disabled SSID is disabled on all APs. An enabled SSID can be controlled on which APs you want to use the SSID. ... View more

All default SSIDs are always there. Just disable all that you don't need. ... View more

How did you test it, that you came to the conclusion that it doesn't work? Often enough it is the local firewall on the destination device that drops the traffic. You can capture on the LAN side of the MX and look if you see the client originated traffic. ... View more

Yes, you can do it with the help of a 0.0.0.0/0 static route pointing to the inside. But could you describe what you want to do? Likely, it won't work because of other VPN restrictions on the MX. ... View more

there where it fits your needs. Only you can know that. For me, it was a Raspberry Pi at home for some time. Later it was a cloud VM behind a dedicated firewall with a reverse proxy in front of it.  But your requirements can be completely different. ... View more

Samsung and Píxel phones are already Wi-Fi 7, most new windows notebooks will likely soon be be200 based. I am pretty sure that Cisco can not skip it. And the Wi-Fi 7 certification is rarified. Only the standard is not ready yet.  ... View more

It seems that Cisco is not hurrying to enter the Wi-Fi 7 market. Always remember that 6GHz is the game changer, and this is available with a powerful line of APs (916x). For the enterprise environment, Wi-Fi 7 still has to show if there are real benefits. MLO? Perhaps. 320 MHz? Never ever! 16 Spacial Streams? No AP will show up with that. 4096QAM? Only if you are directly standing under the AP. For sure, when Wi-Fi 7 APs are released and you want the most modern device, it is the way to go. But I would not halt any deployment and wait for them. ... View more

In a CL discussion last year, they said that the chassis approach is not well representable in the way the dashboard is built. They compared it to the early days when IPv6 was the same problem but was adopted over time. ... View more

@RaphaelL wrote: and one IPv6 session ( even if I'm disgusted by ipv6 🙂 ) You are too young to ignore IPv6 until retirement ... 😎 ... View more

Please, no advertising of braindump sites. ... View more

I'll be there and have scheduled mostly wireless sessions and some security. ... View more

So you say I ignore the licenses and just add the devices and one line end-date? I hadn't expected that to work, but okay, at least that is much less work. ... View more

This was the main problem ... dozens of licenses purchased over the last years. I was hoping to avoid this work. ... View more

Ok, if this is the case, it could help. But for me, it only shows empty, and the title says it is based on an imaginary organization. And if I add a license of 365 Days the Expiration is shown as a date exactly 365 days away. Either it changed, or it is really a bug. ... View more