Hi, Using Virtual Controller on Instant, I have configured an SSID with 802.1x to authenticate computers against Active Directory. This is working fine.
The same Radius server, NPS on Server 2008R2, is configured to allow user authentication (needed for other reasons).
Now, if employees connect to my "managed computers" SSID from eg their iPhone, they are prompted to log in with AD credentials, and then allowed through.
I have looked at Access rules, and Roles, but the question is, can I limit authentication to Machine only on one SSID / VLAN, and User only on a different SSID / VLAN?
I would appreciate a point in the right direction. I could set up a seperate Radius server, but that doesn't feel very elegant!
Many Thanks
Adrian