Did you get this solved? I can't figure out how you allow Social Media sites at multiple time windows in each day.  As best I can tell you can only set one time range per day per GP.  I don't see anyway you could allow Social media during breaks & lunch within the same day (e.g. allow facebook access from 10:30-11am and again from 1pm-2pm)? ... View more

I see that you didn't assign a VLAN ID 102 to that policy. I also don't know if you have the port trunked. I see you setup the MX group policies because you don't have the MRs. Even though I see a client with 10.10.2.133 the VLAN is 107.   ... View more

Good call @PhilipDAth  ... View more

Correct. ... View more

It shouldn't be neccessary to have a switchport at both ends. Create an SVI on the MS390, assign a port as access to that VLAN, and connect the VoIP router to said access port. You should be able to ping between the VoIP router and SVI. ... View more

Option 2) "do not respond to DHCP requests" as there is already the "real" DHCP server in that VLAN. ... View more