OK, same experiement but using radclient. I do see different results than when using NTRadPing. 1.x server: Cisco-AVPair = "lcp:interface-config=ip unnumbered loopback 2003\\n" So its double escaped the \n, in the DB its not double escaped. The 3.x server shows: Cisco-AVPair = "lcp:interface-config=ip unnumbered loopback 2003\n" If I double escape it in the DB it doesn't change the output from radclient, if I triple escape it it comes out as "\\\n". I don't know how much debug you want to see, the section where its reporting the reply to the client shows as: (1) Sent Access-Accept Id 207 from 172.31.252.152:1812 to 93.191.32.127:34327 length 0 (1) Cisco-AVPair = "lcp:interface-config=ip unnumbered loopback 2003\n" I tried adding "\" as a safe character in the MySQL quieries.conf but it didn't change anything. So is the question, why is FreeRadius 1 double escaping the "\n" and how can I replicate this in 3.0.14? thanks, Andy.