Hi everybody, I'm using freeradius to authenticate and authorize users to cisco switches/routers/FW. My issue is that i want to do aaa for 3 things on the same device: device administrators login (telnet), for 802.1x EAP/MD5 (, and to manage firewall FWSM ACLs (radius attribute in the response: filter-id=acl_name). My question is how to differentiate this 3 needs by a radius attribute in the request, to be able to send in the response only the good radius authorization attribute depending on aaa type asking. Response attributes can be priv-lvl=15, filter-id=acl_name or Tunnel-Type = :1:VLAN the 3 types are configured like this on the csico devices: aaa authentification login default group radius aaa authentication 802.1x default group radius aaa authentication match acl_name interface_name radius thank tou for your help jerrrry