i am trying to pass my wireless users through nac. i have catalyst 3560 switch to which everything is connected to including the nas,nam,wlc and ap.
the problem is i can see the wireless users registered in the nam but they are unable to pick ip address. what could be the problem i attached every configuration i did on the switch, wlc and nam.
how could i fix this error message
1) On the Device Management > Clean Access Servers > Advanced > Managed Subnet page, uncheck "Enable subnet-based VLAN retag". You don't need that checked to do VLAN mapping, and it breaks most networks.
2) There are two red nag messages. One is complaining that you're using the temporary perfigo end entity certificate, and one that you have the temporary perfigo root in your trusted certificate authorities. The only way to get rid of those messages is to get a CA-signed (non-perfigo) cert. The reasoning behind this is that these certs are only meant for non-production environments, so if this is just a test network, you can just ignore them.