>>> Let's say for realm "dr4.cnrs.fr" I would like that only VLAN1 and VLAN2 >>> are permitted. >>> >> >> Use unlang and -=. >> > >excuse me Ivan, I don't understand. can you explain more... >thanks. > You say attr.filter is not working (and provide no debug) for you. Use unlang instead. Read man unlang and see what is -= for. Ivan Kalik Kalik Informatika ISP