Behind the subject is the thought: If I return a group policy (filter-id) in the access-reject message from my radius server will the switch honor this, and apply the GP to the client ?
The thought is to apply a GP, with additional ACLs, to clients being placed in the guest network for an access-policy.
Thanks
/Thomas