We are wanting to get Apple Mac's on our network. We do not route the internet space on our corporate network. When a mac gets shipped to an employee, we want them to be able to pull it out connect it to a wireless network and provision it. we could provision an ssid that would tunnel out to the internet, but would need some way to lock it down to just new Macs comming on line and not allow anyone else to connect to it. we have sites world wide that would need this capability. We are running controllers and IAP's running 6.4.2 and above. we also have clearpass installed that we are using for authentication on the corp. side but not sure how to get clearpass involved as it would be a PSK on the authentication side.
Anyone else doing this with this type of scenario?