Hi, You can do it all with EAP and RADIUS - allows you to set WDS password for every individual user if you want to in radius profile, then set connection parameters according to the auth'ed user: IP address, filter chain, packet marks, routing table, vlan-id, and more! So radius profile or radius group will control who gets to talk to each other and who is isolated. May take a little longer to get it all put together, but gives you the ultimate in flexibility in the end ;) Cheers, Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Karl Auer Sent: Thursday, 17 September 2015 9:21 PM To: public@talk.mikrotik.com.au Subject: Re: [MT-AU Public] virtual APs - how many?
On Thu, 2015-09-17 at 07:56 +0000, James Symon wrote:
You could use a single ap with WPA2-EAP and have your DHCP server issue /32 addresses.
Yes - but what I'm looking for really is the ability to host very small groups - possibly as few as one person, but possibly three or four or five.
The default filter for this plan will be isolation between the groups, but a simple exception lets two groups talk to each other.
Regards, K.
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~ Karl Auer (kauer@nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160
GPG fingerprint: 9DCA 0903 BCBD 0647 BCCC 2FA7 A35C 57A1 ACF9 00BB Old fingerprint: 231A B066 CF91 1216 4F0F F2AC CE25 B8AA 46DC CC4F
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au