I'm currently deploying wireless network on my enterprise. I need to use Radius to authenticate users, everything works fine when I only have 1 SSID. But I need to deploy multiple SSID, many using Radius. The problem is that I want every user to be able to connect to the "Staff" network, but only some user to connect to the "IT" network. I'm currently using for testing TekRAdius server, I created an account and I've setup one NAS-ID per SSID to differentiate the SSID on the radius server. The access points are HP MSM410 (No Controller yet...)
How can I do this ? On the production system, I will not have control over the radius server (but I will have control on the AD)
The security configuration of the IT SSID:
The configuration of the RADIUS client:
The configuration of the user on the radius server:
Is there a possibility of defining multiple NAS-Identifier per user to allows it to connect to multiple SSIDs using this ? Would be this the good way ?