One of the issues with using airgroups to manage who can connect to what device is that at the end of the day all the clients in a particular role can see every other client in that role irrespective of whether they are owned by the same person.
I'd heard that Aruba were thinking of using VXLAN to provide a feature whereby every device connected to a wifi controllers owned ( registered by) the same user would be placed into their own address apace. This would mean that
1). Just as in a home network every device would see very other device no acls required
2). This would be segregated from every other users "address space"
Wondered if this ever got further than the thinking about it stage...
A
------------------------------
Alex Sharaz
------------------------------