The idea is that I have two VLANs:
- VLAN 10: Private (10.10.10.0)
- VLAN 100: Public (100.100.100.0)
Then also a MAC Address List, which contains all Devices, that are allowed connecting to the private VLAN.
FreeRADIUS should then no matter how the device is connected (LAN or WLAN), assign the correct VLAN. The MAC Address Authentication should work without requiring 802.1X and WPA Enterprise.
Here is an example, in this case with UNIFI and only with WLAN, to better understand what I want to accomplish in OpenWRT: UniFi, OpenWRT, freeRADIUS: Mac Address Dynamic VLAN Assignment for WPA2-PSK | Nick Bettison LINICKX.com