Guys, I read some article about setting ippool on freeradius and I can let radius return a configured ippool to strongswan vpn server. But this is not meet my requirement. Ideally, I want some users use one ippool and others use another pool. And the user types maybe dynamic e.g. flags in postgresql db table. I read article related ippool and sqlippool but seems not meet my need. Would like anyone implement such solution and give me some according configuration. ps. my final goal is through this to control vpn end user bandwidth. I know freeradius have bandwidth control when user logined but that no good since it kickout user when found the usage quota exceed. I want user can still use but bandwidth controlled(current solution is different pool and use tc on server). -- Best Regards, Yanrui Hu -- *This email may contain or reference confidential information and is intended only for the individual to whom it is addressed. Please refrain from distributing, disclosing or copying this email and the information contained within unless you are the intended recipient. If you received this email in error, please notify us at legal@appannie.com <legal@appannie.com>** immediately and remove it from your system.*