Hi, I'm trying to test a basic VLAN setup. For now I just need to assign a test user's host to a specific VLAN. For simplicity's sake, in the default authorize section (sites-enabled) I am calling a custom policy "filter_username" function which includes the following test clause: if (&User-Name == "tstusr") { update reply { Tunnel-Type := VLAN Tunnel-Medium-Type := IEEE-802 Tunnel-Private-Group-Id := 12 } accept } I see this in the log: (0) Login OK: [tstusr] (from client D1881 port 15 cli F4-39-09-D9-14-C8)(0) Sent Access-Accept Id 16 from 10.215.144.91:1812 to 10.215.144.146:33288 length 0 (0) Tunnel-Type := VLAN (0) Tunnel-Medium-Type := IEEE-802 (0) Tunnel-Private-Group-Id := "12" (0) Finished request However, the host I'm connecting doesn't seem to be able to communicate with other hosts in VLAN 12. How can I debug this further? Thanks, Vieri