Hi ! We have a FreeRadius-1.1.7 which proxy radius request from several vpn servers. We need to reject students connecting to a employee vpn server. raddb/users : DEFAULT Realm == "student", NAS-IP-Address == 10.0.0.4, Auth-Type := Reject Reply-Message = "No VPN Access for students on 10.0.0.4", Fall-Through = 0 DEFAULT Realm == "student.domain.com", NAS-IP-Address == 10.0.0.4, Auth-Type := Reject Reply-Message = "No VPN Access for students on 10.0.0.4", Fall-Through = 1 The first with realm "student" doesn't work, but the last with realm "student.domain.com" does work. If I change the realm's then the first one always doesn't work, and the last one always work. -- Med vennlig hilsen / Regards; Roar Pettersen roar.pettersen@it.uib.no - http://www.uib.no