Yes, your explanation is clear. But I think that you must affect a default vlan at each user. Because the filter of ldap module is the same for each request and for your example the filter works for test2 but for test3 the Cisco-AVpair attributes is vacuum and its normal if he dont works. Sorry, but I have not other solution. Ludovic Cailleau Antonio Matera <antonio.matera@create-net.it> a écrit : test2 Cisco-AVPair == "ssid=VLAN2", User-Password == "passwd2" Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 2, Tunnel-Type = VLAN test3 User-Password == "passwd3" Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 3, Tunnel-Type = VLAN test2 can connect to vlan2 only with ssid=VLAN2. test3 can connect to vlan3 with any ssid. This configuration works ed I want the same using only ldap module without user file. I hope that my explanation is clear. Bye Antonio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ludovic Cailleau --------------------------------- Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.