Ok, when i use the Filter-Id tag on the RADIUS server I supose that the MT would recognise this tag and create a dynamic chain, so i could control the trafic from diferent types of users.
firewall filter chain name. It is used to make dynamic firewall rule that will jump to specified chain, if a packet is came to or from the client. Firewall chain name can have suffix .in or .out, that will install rule only for incoming or outgoing traffic. Multiple filter-id can be provided, but only last ones for incoming and outgoing is used
(From the MT 2.7 manual)
I can do this with an hotspot, but with 802.1x authentication the dynamic chain is not created.
Does the MT implement this?