Locking nodes to a specific AP

[schadmin]

I was wondering if there was a way to stop certain laptops from roaming to certain access points (Cisco 1200 AP's). I would like all computers EXCEPT 4 of them to be able to roam to different AP's. The other 4 I would like to restrict connection to just 1 certain AP. Can this be done?

[djoconnor]

There are a few ways of doing this.

1. Mac authentication

2. Different SSID with different VLANs.

3. If you are using WDS (you should be) then two separate instances of WDS and let the RADIUS service decide who can use which WDS.

I would go with different SSID and VLANS

Configure all APs with ssid "A"

Configure the 1 AP with ssid "B" in addition to "A" (ie two vlans)

Configure the 4 to associate to ssid "B"

Configure the balance to associate to ssid "A"

Configure your authentication method appropriately for each SSID (ie only allow the 4 on "B")