Hello list I am trying to assign different vlans for my different Radius-users. The good news is that with a user defined in the users file it works fine. The users file : tester cleartext-Password := "alois" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 155 The message: ++[eap] returns ok Login OK: [tester] (from client ciscosw port 29 cli 00-1F-E1-23-71-85) +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 255 to 10.53.240.10 port 32769 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "155" User-Name = "tester" MS-MPPE-Recv-Key = 0x283b539628ec3ece70444bce496d078fc67323356a6cd12f435f878743447f7a MS-MPPE-Send-Key = 0xa978c29338aa1547d14524b0f43bfcde45841e3bce0f9c30a0b6c3d57187d810 EAP-Message = 0x03130004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 12. But with my users in Ldap - it does not work my user in ldap : dn: uid=test,ou=users,dc=sb-brixen,dc=it objectClass: radiusprofile radiusTunnelMediumType: IEEE-802 radiusTunnelType: VLAN radiusTunnelPrivateGroupId: 154 The message: [ldap] looking for check items in directory... rlm_ldap: radiusTunnelPrivateGroupId -> Tunnel-Private-Group-Id:0 == "154" rlm_ldap: radiusTunnelMediumType -> Tunnel-Medium-Type:0 == IEEE-802 rlm_ldap: radiusTunnelType -> Tunnel-Type:0 == VLAN ...