two user authentication groups for one AS

Hi There is one VPN server that I want to authenticate some of its users with ldap-1 and others with ldap-2. how should I differ them? I defined: DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-1, Autz-Type := Vpn DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-2, Autz-Type := Vpn but it only sees first line.