>How do I configure FreeRADIUS to "read" the AD group membership >attribute, See group membeship section in ldap module configuration. >and how do I then pass the matching VLAN-ID back to the >switch? Your switch documentation should tell you that. You normally use Tunnel-Type, Tunnel-Medium-Type and Tunnel-Private-Group-Id attributes. Ivan Kalik Kalik Informatika ISP