How to configure an SSID that will first authenticate with WPA-2 personal and then do MAC Authentication as well using External radius server, which is integrated with AD with user groups and applied policies on all the groups.

[sverma]

one customer is doing the same authentication using CISCO WLC and he wanted to achieve the same authentication using hive manager NG.

[samantha_lynn]

You can set this up, but you'll wan to go go to Configure> Open the Network Policy> Open the SSID> Scroll down and expand additional settings> Edit the Optional Settings> Scroll down to Choose User Profile Application Sequence section> Change the order of the application sequence to match what you would like to apply to the user. For your example, you'll want the SSID to come first, then the MAC auth, then CWP.

When you set up the MAC auth, you can set it up to point to an external server and use your own AD. This guide reviews how to set up MAC auth in ExtremeCloud IQ:https://thehivecommunity.aerohive.com/s/article/MAC-Authentication-in-HiveManager