Ok, thank you about answer!! Please, I have a yet a question: every time when I try to login from same username with same password, successfully login user which is first meet in a users file. How can I delineate this users over Service-Type which include a aaa packet??? - from cisco console (NAS-Prompt-User) -from dialup (Framed-User) file "hint" DEFAULT Suffix == ".ppp", Strip-User-Name = Yes Hint = "HNT", Service-Type = Framed-User, Framed-Protocol = PPP file "users" usr100 User-Password := "pass" Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=0" usr100 Auth-Type := Local, User-Password := "pass" Called-Station-Id == "1133", Service-Type = Framed-User, Framed-Protocol = PPP, Cisco-AVPair ="ip:addr-pool=dynpool" DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Auth-Type := Reject Reply-Message = "%{User-Name}, don't have access!" $ echo "User-Name=usr100,User-Password=pass,Service-Type=NAS-Prompt-User" | radclient 127.0.0.1:1812 auth testing123 Received response ID 244, code 2, length = 50 Service-Type = NAS-Prompt-User Cisco-AVPair = "shell:priv-lvl=0" $ echo "User-Name=usr100,User-Password=pass,Service-Type=Framed-User" | radclient 127.0.0.1:1812 auth testing123 Received response ID 244, code 2, length = 50 Service-Type = NAS-Prompt-User Cisco-AVPair = "shell:priv-lvl=0"