I'm sorry thats not what I ment. I already have a wpa2-radius setup with ROS and the ubiquiti ap's a long time.
With rfc 3580 you can make dynamic vlan's. So you can asign specific users to a specific vlan based on their login username or you can allow access to a specific ssid for a specific user. You can create user groups like staff and students and assign them to different vlans. Or you can use a single ssid and assing authenticated users to their specific vlan to separate traffic of user groups. Now I have several ssids for different vlans.
See
http://searchnetworking.techtarget.com/ ... horization