Turbo Fredriksson wrote: > Isn't this 'radiusClientIPAddress' (RADIUS attribute 'Client-IP-Address')? > > 'Client-IP-Address. Matches the IP address of the client in the request.' No. That *matches* the client address. It's a comparison for policies. It does NOT define a client. Real client definitions need more information, like a shared secret. Alan DeKok.