the configuration described in the initial post successfully works on freeradius-2.2.5 ... how to understand, what differs? ---[ quotation start ]------------------------------------------- +} # group authorize = updated Found Auth-Type = EAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +group authenticate { [eap] Request found, released from the list [eap] EAP/md5 [eap] processing type md5 [eap] Freeing handler ++[eap] = ok +} # group authenticate = ok # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default +group post-auth { ++[exec] = noop +} # group post-auth = noop Sending Access-Accept of id 26 to 192.168.0.1 port 49205 Reply-Message = "002590d9762c, you are comming as MAC Auth object." Tunnel-Private-Group-Id:0 = "VLAN3499" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN Service-Type = Framed-User EAP-Message = 0x03010004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "002590d9762c" ---[ quotation end ]------------------------------------------- -- Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET)