Hello, I have a problem with vlan assignment on the group. If user is in group wi-fi should get ip with vlan 200 if it is in another group should get ip with vlan 216. I attach file witch freeradius -X. Users and group are in SAMBA4. If i login to wifi i get allways ip on vlan 216. I use login@mydomain.pl to connect wifi. I try add in users but this is ignored root@LDAP1 /etc/freeradius # cat users DEFAULT LDAP-Group != "wi-fi", Auth-Type:=Reject Reply-Message="You are not allowed to connnect" DEFAULT Realm == Null Auth-Type := Reject DEFAULT Realm == NULL, Client-IP-Address == 14x.xxx.x.40 Auth-Type := Reject DEFAULT Realm == NULL, Client-IP-Address == 14x.xxx.x.66 Auth-Type := Reject DEFAULT LDAP-Group == "wi-fi" Reply-Message="XXXX HIT: wi-fi", Tunnel-Private-Group-Id := 200, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Please help -- Z poważaniem / Yours sincerely Zenon Matuszyk mobile: 00 48 797 004 938 e-mail: zenon.matuszyk@networkers.pl www: http://www.networkers.pl