Your AP's also need advanced licensing if you want to apply SGT's to wireless sessions. So basically for full coverage you need: -MS390's in the access layer -MS390's or Cisco Catalyst switches in the distribution and core layer -Advanced licensing on MS390's, MR's -Network advantage licensed catalyst switches -Advanced security license on MX This is not a cheap solution and would only recommended if you fully commit with an ISE installation and perhaps some other solutions for security that can steer ISE sessions if needed.
... View more
