Yes there two kind of mikrotik nas, one is a cpe to connect users lan by 5GHz wireless bridge and the ohter is a classical access point to give access to wireless clients. I've inserted this at the end of policy section in policy.conf but seems not to be read: i can still get authenticated with user usercpe01 on a 2.4GHz access-point that has Called-Station-Id = hotspot1 if(Called-Station-Id =~ /:([^:]*)^/){ switch "%{1}" { case 'hotspot1' { if(User-Name = 'usercpe01'){ reject } } case 'WiNET-TR5G' { if(User-Name != 'usercpe01'){ reject } } } } -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authentications-types-by-usernames-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.