Hi Guys,

Looking for a little help or advice please. I have a 2860 and 3 AP910Cs, the Radius authentication is done via one of the AP910Cs and the other two auth against that one, done for the roaming (mobility) capabilities.

I have come accross a slight issue, we have 2 SSIDs setup, one on the 5Ghtz and one on the 2.4Ghtz band. We are running 3 VLANS the the two SSIDs are on a VLAN each and then a wired network on the other VLAN, however what I have found is that using 802.1x which is needed for roaming a user can just log onto either SSID, what Id like is to be able to restrict the username to a perticular SSID, is that possible.

MAC Filtering is really not possible as we have so many mobile users and guests....

Thanks John

I don't think it possible as you are pointing everyone to the Same accounting server. there isn't an option to restrict user per SSID/VLAN

We get around it with NPS, Active directory and Security groups