Hello @all I use free radius version 3.0.10 and the ntlm_auth for authenticate users via 802.1x over the AD Now i wan’t to setup switches with dynamic VLAN configuration. I tried to use in the authorize section unter default and inner-tunnel mschap if ( ok ) { update control { Tunnel-Type = 13, Tunnel-Medium-Type = 6, Tunnel-Private-Group-Id = 8 } } But no effect. Also i tried to use authenticate { ntlm_auth Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap if ( ok ) { update control { Tunnel-Type = 13, Tunnel-Medium-Type = 6, Tunnel-Private-Group-Id = 8 } } } But it doesn’t work. How can i use update control if ntlm_auth was successful? Thanks a lot Torsten