Requiring a pre-built MAC table on the RADIUS server kills this concept for us. We need a BYOD solution that allows users to access different VLANs using different PSKs. Needing to manually add devices to a MAC list is severely limiting to the possible applications of this concept. We've standardized on Catalyst APs to have redundancy across all sites with APs able to migrate to a different 9800CL in the event of an outage. In the meantime, we will continue to clog airspace with multiple SSIDs to direct devices on to different VLANs. It would be much nicer to have a single SSID with multiple PSKs for our myriad VLANs. I've been assured by our chosen firewall vendor that this would be trivial to accomplish on their platform, and since the firewalls act as the controllers, redundancy would be easy as well. We would lose DNA and some deep features, but when the refresh comes around we will certainly have a Pros/Cons board for switching vendors.
