Captive portal VLAN Translation

[parsec]

Hey there folks,

I have a setup in which i have a BYOD Network. The Network consists of multiple WLAN APs.
When a user that is not authed by the Captive Portal connects to the network, i want him on a different VLAN then after authentication. Is this possible to achieve with OpnSense and WPA2-PSK ?

[axsdenied]

What would you be trying to accomplish by that setup?  If you're worried about access, that user is isolated until authenticated.

[parsec]

Thanks for your reply,

Yes im mostly worried about unauthed users being able to sniff traffic.

I am a little confused here since the OpnSense documentation on how the CP really works is limited. I also would love to know if it is possible to encrypt the data stored in the sqlite raddb but i guess i should create a new thread for that.