Hi, With "dynamic clients" there is a (coming soon...) way to do it. Alan is going to make the NAS-Identifier available in a future release to the "dynamic clients" section. When this has been done, you should be able to "authenticate a nas" using the identifier/password. Cheers, Johan Meiring Cape PC Services CC / Amobia Communications Tel: (021) 883-8271 / (0861) AMOBIA Fax: (021) 886-7782 / (0861) AMOFAX -----Original Message----- From: freeradius-users-bounces+jmeiring=pcservices.co.za@lists.freeradius.org [mailto:freeradius-users-bounces+jmeiring=pcservices.co.za@lists.freeradius. org] On Behalf Of David Mitton Sent: 27 November 2008 08:49 PM To: freeradius-users@lists.freeradius.org Subject: Re: Is it possible to recognize clients not by their IP addresses? Absolutely not. How does the RADIUS server know which NAS is talking to it? It needs to know which secret to use. Dave. Nov 27, 2008 01:01:41 PM, freeradius-users@lists.freeradius.org wrote: Hi!! The format of ${raddbdir} /clients.conf defines NAS by its IP pool. And what if I'd like to have a pool of NASes each using unique secret but not to specyfy their IP or domain names to the freeradius config files? Is it possible to do so? When I was trying to create 2 client sections for same IP pool but diferent secrets only the second was working. #clients.conf client 0.0.0.0/0{ secret = test1 shortname = public1 } client 0.0.0.0/0{ secret = test2 shortname = public2 } And with such configuration sending requests with 'secret = test1' always fails :( - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html