There is Freeradius 3.0.23 on Ubuntu 18.04LTS x64 and some HPE and Mikrotik managed switches with HP-NAS-Filter-Rule and Mikrotik-Switching-Filter Radius attributes (rfc4849) supporting. I want to restrict src-address for each switch physical port after success authentication, for example: - switch port 1, MAC a1:b1:c1:d1:e1:f1 - allowing src IP is 192.168.0.20 only, all other IPs are denied; - switch port 2, MAC a2:b2:c2:d2:e2:f2 - allowing src IP is 192.168.0.30 only, all other IPs are denied; - switch ports 3-16, MAC a3:b3:c3:d3:e3:f3 - allowing src IP is 192.168.0.40 only, all other IPs are denied. May somebody tell where, which configuration files, should some attributes looks like HP-NAS-Filter-Rule = "allow port 1 MAC a1:b1:c1:d1:e1:f1 src-IP 192.168.0.20 dst-IP any" HP-NAS-Filter-Rule += "allow port2 MAC a2:b2:c2:d2:e2:f2 src-IP 192.168.0.30 dst-IP any" HP-NAS-Filter-Rule += "allow port3 MAC a3:b3:c3:d3:e3:f3 src-IP 192.168.0.30 dst-IP any" .... NAS-Filter-Rule += "allow port16 MAC a3:b3:c3:d3:e3:f3 src-IP 192.168.0.30 dst-IP any" to be added to ? And what format is it ?