I have several groups in the SSID. I want certain devices to connect to certain groups.   I do not want these devices to be able to connect to any other group in the same SSID if another groups password is leaked.   Due to Layer 3 firewall setting in that groups, Group Policy.  It's "Blocked until Whitelisted".  Currently I can type in the password for that group that's in iPSK without RADIUS.  Then I have to whitelist that device when it is approved so it can finish the connection.    But, this also seems to whitelist that device for ALL the other groups.  So, if the password from GROUP 1 is leaked to someone who should be in GROUP 2, that device will be able to connect to GROUP 1.   I want to prevent this.  I think I'm getting lost in the settings somewhere or need to take a different approach at this. ... View more