Can Two SSIDs, One Guest One 802.1x, share the same VN/IP Pools?

[lancenichols]

In traditional WLC deployments you can offload multiple SSIDs off into the same VLAN. Our use case is having a Guest SSID that uses portals, but some Guest organizations that are onsite all of the time want to do 802.1x authentication.  In traditional deployment I simply have two SSIDs, one Guest that does RADIUS to a set of portal PSNs, and another SSID doing 802.1x to a dedicated set of PSNs that will do 802.1x for groups that will supply us their devices certificate sets.  Since both user groups are "Guests" in our view, we have no issue with both being put in the same VLAN, or VN in SD-Access world.  Is this configuration possible in an SD-Access environment?

[andy!doesnt!like!uucp]

i guess it's pretty possible but u still have to use 2 different SSIDs as u cannot combine 2 different AuthC methods within single SSID.
But with ISE u can recognize guests connected to dot1x-configured SSID & return Guest VLAN to WLC for successfully authenticated client to land him in Guest SVI.
please also look here SDA Fabric Wireless & dynamic vlan authorisation! - Cisco Community
this topic is about using single SSID to land clients in different VLANs but it gives some clue on how u can achieve your task
UPD. just noticed that u r going to use 2 different SSIDs. So that's proper way to go. Please keep tread updated with result