Hello, Can you check if this expected in FreeRadius 3.0.21. DEFAULT Suffix == "@REALM", NAS-IP-Address == 1.1.1.1 MS-Primary-DNS-Server = 8.8.8.8, Pool-Suffix = "BC", Fall-Through = Yes DEFAULT Suffix == "@REALM" Client-DNS-Pri = 9.9.9.9, Pool-Suffix = "BC", Fall-Through = Yes When the request is coming from NAS 1.1.1.1, this is fine and FR is sending DNS 8.8.8.8 Line 10 is a default one Line 56 is the Yellow Line 80 is an other default. (0) auth_dsl: users: Matched entry DEFAULT at line 10 (0) auth_dsl: users: Matched entry DEFAULT at line 56 (0) auth_dsl: users: Matched entry DEFAULT at line 80 When the request is coming from an other NAS, it's expected to match the second one (line 61) but that doesn't happened. (0) [suffix] = noop (0) auth_dsl: users: Matched entry DEFAULT at line 10 (0) auth_dsl: users: Matched entry DEFAULT at line 80 Is it expected?