Mick, if the users are going through the NAC portal to login, we can limit the # of users there.
The default value is #2.
Otherwise, from the rules point of view we cannot limit the number of devices if they are using basic mac-authentication or 802.1x. If they are forced to login via the portal with Secure Guest Access or Authenticated Registration, then we can limit it this way.