Hi, When I use 802.1x and MD5 (PAP) I can add easily pass VLAN assignment back to the NAS using username Cleartext-Password := "password" Reply-Message = "Hello, misch", Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 100 in the users file. When I switch the supplicant the PEAP-MSCHAPv2 I see these attributes beeing addes to the inner tunnel. The outer tunnel only has the EAP attributes and tehe switch doe not see the VLAN attributes. How is it possible to pass these attributes to the switch in the outer tunnel? Thanks for any help. -- Dr. Michael Schwartzkopff MultiNET Services GmbH Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany Tel: +49 - 89 - 45 69 11 0 Fax: +49 - 89 - 45 69 11 21 mob: +49 - 174 - 343 28 75 mail: misch@multinet.de web: www.multinet.de Sitz der Gesellschaft: 85630 Grasbrunn Registergericht: Amtsgericht München HRB 114375 Geschäftsführer: Günter Jurgeneit, Hubert Martens --- PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42