Using the example provided in http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml , I have configured several shared NAR's to restrict our WLAN access. When applied, they don't seem to do anything. If I add the NAR as a per group, it works, but then denies all other shared NAR's we have setup. I was wondering if anyone has successfully accomplished this, and how they managed to get it to work. Applying the NAR directly to users is not any option. I have even tried creating a shared nar that denies access to other SSIDs (so I have one that allows ssid1, and one that denies ssid2) but that also does not work, I can access any ssid.
running ACS Release 4.2(0) Build 124 Patch 11