We nee to configure windows Radius to accept Extreme wifi VSA SSID to authenticate users to the wireles network. We have Radius authentication working fine however due to both pupils and staff being in the radius server they can both authenticate and connect. The SSID is a "Staff" SSID which we only want "Staff" to be able to connect to and not "pupils". I have seen in the "Radius TLV's" within the "WLAN Service/Auth&Acct/RadiusTLV's" you can send the "SSID" to the Radius server. How do we make the radius server read this and how do we configure the Radius server to only allow the group "Staff" connect and not the group "pupils"?