I'm looking to add a wireless access point in a different location from an existing Draytek 2820. The AP will be configured to authenticate against a RADIUS server.

On site we employ Web Content Filtering provided by the 2820. We have a separate rule for director PCs and general employee PCs. By default users on the network will be on the "general" rule and I must add their device MAC to an approved list to get on the "director" rule. We would like to use this differentiation with wireless devices.

The question is would the 2820 still be able to filter by MAC per device connected to the AP or would it see all traffic as originating from the AP MAC and filter accordingly?

Never mind; answered my own question with a spare wireless router I found.

The 2820 can see the MAC address of each wireless client connected to the AP so it's possible to continue using our filtering rules.