Hi at all,
I can´t say anything about the 7010 we have a 3200 controller.
We have different SSID´s with different authentication methods for different types of endpoints.
Similar for mobile devices (iPhone / iPad) we have Mac Auth + 802.1 X. So we have to enter the mac address into the internal database of the aruba controller (3200). If this happen the, now the user must authenticate his device with a active directory account over the nps.
You must do both on controller, can´t do one on the IAP and the other in the controller.
So you must configure under “ Security > Authentication > Servers > RADIUS Server” your radius server and under “Security > Authentication > Servers > Internal DB” you must insert the mac address.