Per user (or user group) access lists

[djoconnor]

Does anybody know if it is possible to restrict IP access across an AP by passing back access lists, or names of access-lists in 802.1x authenticated connections?

I know this is common enough on RAS, switches and VPN enbpoints but does anybody know of a way to do it with Access Points?

I have to main classes of users and are unable to use vlans to implement security and are looking for alternatives.

[murabi]

You can enable IP based filters on the APs for more details check the following URL,

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo1100/accsspts/i12215ja/i12215sc/s15filt.htm#wp1034899

[djoconnor]

Hi,

I looked at the static filters definitions and they don't do what I need. I need to be able to send down to the AP (perhaps from a RADIUS server during 802.1x authentication negotiation) an access list to apply.

What I'd really like is for all associated clients to appear on the access point as virtual interfaces so I could manage each association independently of the others.