Hi   1. MAC-based Access Control with RADIUS You're right—MAC-based authentication itself isn’t encrypted, but the actual traffic can still be encrypted with WPA2/WPA3. While this setup works for payment devices, consider adding other layers like 802.1X for stronger security, as MAC addresses can be spoofed.   2. MAC-based vs. Enterprise Authentication MAC-based: Authenticates by device MAC address. It’s simpler but less secure. Enterprise (802.1X): Uses credentials (certificates, usernames) for authentication, offering stronger security and encryption, including during the authentication phase. For the best security with isolated payment VLANs, Enterprise authentication (802.1X) is the recommended option, though it’s more complex. ... View more