I am having my first IT audit since installing the Aruba system. We have a small location with a 650 controller and APs. they had few concerns with the guest network, however the employee network that we use for ipad connections they had issues. We use a Radius server for Active Directory authentication, however they want to add another layer. is there a way to have a white list of MAC address for clients that can access the system, and still require the user to log in?