I have a setup I've been requested to implement, but I'm not sure if it's possible, or if it is possible, how to combine the components.
Based on the type of device connecting to a single SSID, different authenticataion methods should occur. If connecting on a laptop/computer, then authenticate via 802.1x (eap-peap) against AD. If connecting on a company issued smartphone, authorize via MAC addressing. Connecting on a smartphone needs to be seamless from the viewpoint of the user.
I can do 802.1x Authentication, and I can get MAC address Authentication, and detect device types with profiling, but I'm unsure on how to combine these to get the requested implementation.
As a side note, I expect that the mobile devices will end up being placed on a different vlan from laptops.
Thank you for any insight