I am running FreeRADIUS Version 2.1.8 with mysql as backend database in lab environment. I am authenticating PPP customers from two different network segments behind two cisco NAS devices. All PPP customers are defined in single mysql database with realm suffixes @domain1 and @domain2. ---- start of proxy.conf ---- realm domain1 { type = radius authhost = LOCAL accthost = LOCAL # allowed-nas = 1.1.1.1 nostrip } realm domain2 { type = radius authhost = LOCAL accthost = LOCAL # allowed-nas = 2.2.2.2 nostrip } realm external { ... } realm external2 { ... } ---- end of proxy.conf ---- I would like to know if there is any possible way to attach a list of allowed NAS clients to realm domain2 for example, so that RADIUS discard requests comming from nas 2.2.2.2 with realm @domain1?