Hello, i try to use files and SQL for authentication. In my users file, i have a DEFAULT user and a specific user 'HSI/DEU.MYID.47110815' in SQL radcheck/radreply table. If my user is authenticated, Attributes from respective user *and* from DEFAULT user are replied to the nas although there is no explicit "Fall-Through = Yes" attribute. Is that an excpected behaviour ? How can i achieve that only attributes from specific user is replied and those from DEFAULT user are only replied, when there is no accurate user. root@quagga:/opt/freeradius/etc/raddb# more users DEFAULT User-Name =~ "^HSI.*", Auth-Type := Accept Class = "Default" reply-detail-20171221: Thu Dec 21 14:43:52 2017 Packet-Type = Access-Accept Class = 0x44656661756c74 ERX-Virtual-Router-Name == "VRF-132" mysql> select * from radreply; +----+-----------------------+-------------------------+----+---------+ | id | username | attribute | op | value | +----+-----------------------+-------------------------+----+---------+ | 4 | HSI/DEU.MYID.47110815 | ERX-Virtual-Router-Name | == | VRF-132 | +----+-----------------------+-------------------------+----+---------+ Freeradius version is 2.2.10. Attached you also find a debug from the mentioned authentication request. Regards, Alex