a few pointers to provide a better service for end users

firstly, ensure you have a policy in place on the RADIUS server to ensure that any local authentications MUST have a realm defined.

ie 'if SSID = eduroam , then User-Name must have @'

(this can be done in FreeRADIUS using unlang, in RADIATOR using a Handler or PERL hook, and ACS/NPS in the policy section)

what does this achieve/fix? read on...