How to separate masquerade and Authentication in hotspot?

Hi:
I want to separate masquerade and authention in hotspot,how to config?
Mean one device run only masquerade,other device run hotspot ip address apply and Authentication。
Thanks.

Make each user profile (or just your special case one) add the user to an address list on login. Then, in the firewall, instead of masquerading all users, do/don’t masquerade based on whether the IP is/isn’t in that list.