Forgot my password for my account/the password I saved no longer works. I don't have access to the e-mail I used to sign up since you must agree to unsolicited marketing (which I'm not too fond of) to post questions on this form (which is a very odd requirements), but that aside here is the scenario:
It is a dorm.
We have multiple kitchens shared between several students. Every student has their own network in their room on their own VLAN for legal reasons. Every student has a RADIUS login where devices get assigned to their VLAN id. The individual logins are created/deleted as they move in/out. Every kitchen has its own VLAN.
We have a common wifi that lets students connect to their own network via their RADIUS login. The idea was to another WPA2-Enterpise SSID for the kitchens. Once a student login there, the RADIUS server will assign the user to the VLAN of their kitchen instead of their personal VLAN id. Why? So they can access a cable-connected Chromecast on the kitchen VLAN to stream Netflix or similar.
One could have an Nvidia shield or another streamer, but they work best with permanent logins. Chromecast is perfect for shared kitchens as you "log on" to the service when you cast the video.
Chromecast requires multicast to be discovered. Ideally, we would also like to support other IoT devices that use broadcast. With a shared broadcast domain (via the shared GTK, that does not care about the VLAN ID), multicast and broadcast packages meant for one kitchen can be seen by other kitchens on the Kitchen WPA2-Enterpise SSID. This is unwanted.
The students can set up their own wifi router in the kitchens, but the idea was to avoid this to have less RF noise and maybe a better overall experience by doing it centrally. Also, since we already have wifi APs in the kitchens, we wondered if switching to Cisco or Meraki would give us some new options.
Using iPSK might be a solution, but it would be yet another password for the students to remember. It would be nicer to avoid the need for yet another shared password. The idea of the individual password is that the logins stop working once they move out automatically. Resetting the iPSK password every time a student move in/out would be overkill/not user-friendly. Having different passwords for each student would properly be chaotic/hard to explain to the students.
Therefore, while it looks like WPN could work, it is not what I asked about in the first place. We would also like to keep using RADIUS for user management rather than having to create users manually.
