thanks for help. but i have another problem ,
i have authentication with ldap from captive portal but i want to assign this authentication to adedicate vlan so user can't use his user name and password to login from another ssid , i mean making separated ssid authentication