On Catalyst 9800 it is possible to solve this via Regex, so I think it is possible to create a Regex on NPS to solve this. ... View more

Hi @Brash , Thanks ! I think this can be the best solution to map the users for particular SSID wise, and we can provide access to that SSID only to them. ... View more

You could try using the AD auth but on the client device, set the network adapter settings for the VPN as below:     ... View more

Hi @ww  Thanks for writing.   I implemented that as you suggested. But now if the user is changing SSID , then this setting automatically changes to "Randomized MAC". I just want that it should be fixed for every SSID. ... View more

The clients need to use the MX as the default gateway for this to work (in case you have a layer 3 switch).  Also it can take up to 10 minutes for a policy to take effect after you apply it. ... View more

If the wireless subnet is in the MX it doesn't make sense to enable splash page for that subnet in the MX, enable it only in the Wlan and in the MX only for the lan network. ... View more