You could return the same psk for each user or group. You will also need to make a DEFAULT section as described in the meraki document https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication to allow for unknown mac addresses. In the reply for the known users you can override the VLAN. I found a reference how to make user groups on https://stackoverflow.com/questions/71863025/freeradius-3-mac-auth-user-group-for-configuration-simplicity   Good luck! ... View more

@PhilipDAth @cmr @ww  thanks for your comments. We will try the DHCP way asap.   Does someone know why the the APs behave like they do and can explain? ... View more