The idea is to secure my hotspot and not asking the customers to enter severel passwords to get to the internet. Is there anybody with expirience in doing this (I know that it is possible with RADIUS server).
I want just to print voucher like in the standart hotspot, and the users to authenticate with the password in the WPA secured wifi network.
Thanks in advance
Any news about this issue?
+1 for hotspot using wpa enterprise authentication.
Any news about this issue?
I’m interested in this topic as well in case anyone has gotten it working anyhow.
How I would like it to work is pretty much same manner as hotspot - just don’t need login html page. I got to a point WPA2 Enterprise works nicely. Only cannot set attributes e.g. Mikrotik-Rate-Limit. I think the problem is in NAS-Port for which freeradius is giving a warning it being missing.
Interesting idea,
Do you have any success story of that?
Interested.
But no one answer back to this 
Linking the wifi WPA2-EAP logon to the hotspot or other internet filters (webproxy, rates, firewall filters, URL access rights …) that use to the user specific quota, requires the user identification, that now is lost when one passes the WPA2-EAP access control.
I only worked with one solution before , and that is RSSO (Radius single sign on). I had it with Fortinet and that worked very well. Maybe there are other RSSO solutions that could be used. Would be very nice , as the WPA2-EAP logon credentials are stored in the client device. No need for ‘persistent’ connections, to avoid re-login.
Is Hotspot 2.0 useful for a multi-AP private network ??? Roaming? Single sign-on for a hotspot (MT or other private hotspot) ?
Seems not the case, is a totally different setup, for announcing public wifi access.
Still trying to implement this WPA-Enterprise single signon (without using Fortigate or Watchguard), as many Radius parameters apply to a portal only, there is a need to identify the user for the Hotspot portal. Exactly what they do here: : https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/authentication/rsso_about.html
Just found another one that automatically maps the WPA/Enterprise EAP/PEAP/MSCHAPv2 login to the portal login. If you study how they do it, maybe there is some ROS script that does the same and creates either the needed MAC user, or the MAC Cookie in the portal.
https://www.websense.com/content/support/library/web/v80/radius_agent/radius_agent.pdf