Security

hay.

I'm using NPS as radius server.

i wante to do  the following senario :

groupe one :

machines auth+users auth

groupe two:

users auth.

can i do it with role derivation (it the same ssid) .

Take a look at enforce machine authentication here:

http://www.arubanetworks.com/techdocs/ArubaOS%206_3_1_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/802.1x/Configuring_802_1x_Authe.htm#802.1x_1833088626_1028273

i know how to enforce machine authentication.

but i need to enforce only groupe one to do machine authenication.

the second group will only do a user authentication .

can i do it with NPS  or not (in the same vap)

rchahboune,

Neither NPS or the Controller has the logic to enforce machine authentication for specific groups of people.  You would need a Radius Server that supports this, like ClearPass Policy Manager.