Hello i want to allow nas's behind a flatrate to talk with my freeradius server. these nas's has dynamis ip's. has anybody an idea how i could deal with that. at the moment i have a client named 0.0.0.0/0 in the clients.conf file - but that means that every nas have the same shared secret. better ideas ? and could someone tell me if my suggestions about the shared secret are right. -> if using pap or chap shared secred is used to encrypt password when sending. -> if using peap or ttls shared secret is not used in the authentication process but for the sending of encryption key for further encryption of the connection between supplicant and radius at the end of the authentification session is that right ? greetings grischan -- 5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail +++ GMX - die erste Adresse f�r Mail, Message, More +++