On Fri, 2017-11-24 at 20:47 +0000, Carlos Bordon wrote: > i configure the freeradius with ntlm, but now need take groups of > AD for the vlans, > > i have to do this part with ldap? Yes, that's generally the best way with AD. Configure the ldap module to connect to AD, then use unlang to set the VLAN in the response based on the group membership. -- Matthew