Hi, Thanks for the reply. My hosts are all dynamic so am using dynamic-clients - don't think that affects things though does it? If I put the following in my authorize section (to keep things simply), my query has a null value: Huntgroup-Name := "%{sql:SELECT `groupname` FROM `radhuntgroup` WHERE nasipaddress='%{NAS-IP-Address}'}" The mysql query then looks like this: SELECT `groupname` FROM `radhuntgroup` WHERE nasipaddress='' If I use packet-src-ip-address, the query is fine. Replacing with called-station-id renders nothing as well. Does this have something to do with the dynamic clients?? Jenny -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Stati... Sent from the FreeRadius - User mailing list archive at Nabble.com.