Hello, This is my users file. It works. But I have the impression that this could be optimized. Any suggestions? DEFAULT Auth-Type = opendirectory Fall-Through = 1 DEFAULT Ldap-Group == "wlan_test", Airespace-Wlan-Id == 4 Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "wlan_test: WLAN-44 accept", Fall-Through = 1 DEFAULT Ldap-Group == "vpn_users" Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "VPN-User: accepted", Fall-Through = 1 DEFAULT Ldap-Group != "all_wlan", NAS-IP-Address == 192.168.3.20, Auth- Type := Reject Reply-Message = "No all_wlan user: tc-29 rejected!!!", DEFAULT Ldap-Group == "employees" Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "employees: accepted", Fall-Through = 1 DEFAULT Ldap-Group == "teacher", Airespace-Wlan-Id == 3 Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "Lehrer: WLAN-44 accept", Fall-Through = 1 DEFAULT Ldap-Group == "teacher", Airespace-Wlan-Id == 4 Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "Lehrer: WLAN-45 accept", Fall-Through = 1 DEFAULT Ldap-Group == "pupil", Airespace-Wlan-Id == 4 Auth-Type := opendirectory, Reply-Message = "Schueler: WLAN-45 accept", Fall-Through = 1 DEFAULT Ldap-Group == "pupil", Airespace-Wlan-Id != 4, Auth-Type := Reject Reply-Message = "Schueler: Wrong WLAN!!!", DEFAULT Ldap-Group == "schooladministration", Airespace-Wlan-Id == 6 Auth-Type := opendirectory, Service-Type = Login-User, Reply-Message = "schooladministration: WLAN-47 accept", Fall-Through = 1 DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Framed-MTU = 576, Service-Type = Framed-User, Fall-Through = Yes DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP DEFAULT Hint == "SLIP" Framed-Protocol = SLIP Thanks for your help Qrt