Re: Off
You could also use a "captive portal" which will handle the authentication itself, without a RADIUS backend (although you can use it as well with most captive portals). Some APs have captive portal support built-in, or fw/router software like pfSense offer it - adding also another layer of security.