Hi there, I want to implement default 'catch all' rules in radius for customers with wrong passwords, they suppose to be connected and redirected to some web proxy. In the same time that default shouldn't concern customers with correct passwords. Is below correct for my purpose? ... DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Service-Type = Framed-User, Framed-MTU = 1500, Fall-Through = Yes DEFAULT Auth-Type := Reject Service-Type = Framed-User, Framed-IP-Address = 255.255.255.254, Framed-MTU = 1500, Cisco-AVPair += "lcp:interface-config=ip route-cache policy\nip policy route-map toproxy" ... Thank you, Vects