I’ve been experimenting with the server, trying to get it to return arbitrary custom attributes (defined in dictionary.local) to the Radius-reply. When I run radtest against the virtual-server I see the attributes being added and mentioned in the post-auth debug, but I never see the attribute on the client side of the radtest. Is radtest limited to only displaying officially defined attributes, or might I be doing something obviously ridiculous? Radius Debug ~~~ 0) Sending Access-Accept packet to host 192.0.2.90 port 36843, id=194, length=0 (0) Entitlement := 'vpn-library' (0) Juniper-Ip-Pool-Name := 'vpn-library' Sending Access-Accept Id 194 from 192.0.2.53:1828 to 192.0.2.90:36843 Juniper-Ip-Pool-Name := 'vpn-library’ Radtest Output ~~~ Sending Access-Request Id 194 from 0.0.0.0:36843 to 192.0.2.53:1828 User-Name = ‘glados' User-Password = ‘ilovecake' NAS-IP-Address = 192.0.2.90 NAS-Port = 0 Message-Authenticator = 0x00 Received Access-Accept Id 194 from 192.0.2.53:1828 to 192.0.2.90:36843 length 39 Juniper-Ip-Pool-Name = 'vpn-library' ======================= Mark Williams markhw@vt.edu (2A83CAC8)