I have my 2106 WLC configured with multiple SSIDs that are connected to different internal VLANs. I use Microsoft IAS as the RADIUS server. I can connect to any SSID from my laptop. What I want is to configure the SSID so that only certian people can logon to certian VLANs i.e. admins only are allowed to connect to the admin SSID. I've tried setting the Tunnel-Pvt-Group-ID, Tunnel-Type and Tunnel-Medium-Type in IAS but it makes no difference. Does anyone have any suggestions or where I can look to get this figured out? Thanks.