Link SSID with Specific Group in Active Directory

[MOsama]

Dears, 

I have (10) Cisco Aironet 1850i Access Points and it is working as a virtual WLC. Also, I have  windows server 2008 working as Radius server this use for users authentication. 

I have SSID called Staff and this authentication from Radius.

IT SSID authentication Pre-shared Key

Now my question is:- how can i create another SSID and linked with Specific Group in Active Directory like 

SSID called Test and a group in AD called Test and the specific users in this group only allowed to access this SSID.

thanks

[Sandeep Choudhary]

yes you can..

chekc the post:

https://community.cisco.com/t5/wireless-security-and-network/ssid-to-ad-group-mappings-in-acs-5-3/td-p/2009149

Regards

Dont forget to rate helpful posts

[MOsama]

thanks for your response, but did not work for me

[patoberli]

Here another variant:
https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115988-nps-wlc-config-000.html

[MOsama]

thanks but this was WLC. what i have is VWLC. i was read this article. thanks for your help

[patoberli]

They should behave the same, no matter WLC or vWLC for WPA2-Enterprise with PEAP.