Hi all. I need that: - system group A access only switch 1.1.1.1 and 1.1.1.2 - system group B access only switch 2.1.1.1 and 2.1.1.2 I created local group of users A and B and associated users /etc/raddb/clients.conf client 1.1.1.1 { secret = "xxx" shortname = switch nastype = cisco } client 1.1.1.2 { secret = "xxx" shortname = switch nastype = cisco } client 2.1.1.1 { secret = "xxx" shortname = switch nastype = cisco } client 2.1.1.2 { secret = "xxx" shortname = switch nastype = cisco } /etc/raddb/users DEFAULT Group == "A", Auth-Type := PAM Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" DEFAULT Group == "B", Auth-Type := PAM Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" DEFAULT Auth-Type := Reject How can i modify my configurations to let only A users to access switch 1.1.1.1/2 and B users access switch 2.1.1.1/2 ? Thanks. =