Is this to what you are referring Alan please? DEFAULT Ldap-Group == "cn=SeminaryAdmin,ou=SeminaryOU,dc=seminary,dc=local" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = "12" #Reply-Message = "You are Accepted" and this: in: /sites-enabled/default: But there is a bug in update-reply .. not sure why: Thu Aug 18 11:41:05 2016 : Error: /etc/freeradius/sites-enabled/default[465]: Failed to find "update-reply" in the "modules" section. Thu Aug 18 11:41:05 2016 : Error: /etc/freeradius/sites-enabled/default[465]: Failed to parse "update-reply" subsection. Thu Aug 18 11:41:05 2016 : Error: /etc/freeradius/sites-enabled/default[461]: Errors parsing post-auth section. post-auth { if (Ldap-Group == "Management") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 1 } } elsif (Ldap-Group == "Formators") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 10 } } elsif (Ldap-Group == "Seminarians") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 11 } } elsif (Ldap-Group == "SeminaryAdmin") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 12 } } elsif (Ldap-Group == "Staff") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 13 } } elsif (Ldap-Group == "Guests") { update-reply { Tunnel-Type = VLAN, Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 20 } } else { reject }