Hi everyone ... I need to put up a certain scenario for radius. I have 2 Called-Station-Id numbers 111111 an 122222, first number should always be accepted for auth users, the second one should be accessed after the user hits 10 hours quota on first number. I was wonder if this configuration is the right way. server dialup { authorize { preprocess expiration logintime if (Called-Station-Id == "111111") { sql_dialup pap } elsif (Called-Station-Id == "122222" && "%{sql_dialup: SELECT SUM(acctsessiontime) FROM radacct_dialup \ WHERE YEAR(acctstarttime) = YEAR(CURDATE()) AND MONTH(acctstarttime) = MONTH(CURDATE()) \ AND username = '%{SQL-User-Name}' HAVING SUM(acctsessiontime) < 36000}") { sql_dialup pap update control { Auth-Type := Reject } update replay { Reply-Message := "10 hour quota still not reached" } elsif (Called-Station-Id == "122222" && "%{sql_dialup: SELECT SUM(acctsessiontime) FROM radacct_dialup \ WHERE YEAR(acctstarttime) = YEAR(CURDATE()) AND MONTH(acctstarttime) = MONTH(CURDATE()) \ AND username = '%{SQL-User-Name}' HAVING SUM(acctsessiontime) >= 36000}") { sql_dialup pap update control { Auth-Type := Accept } update replay { Reply-Message := "10 hour quota reached, access accepted" } else { reject } } ... post-auth { exec Post-Auth-Type REJECT { attr_filter.access_reject update reply { Reply-Message := "Access denied" } } } } -- View this message in context: http://freeradius.1045715.n5.nabble.com/2-Called-Station-Id-authorize-unlang... Sent from the FreeRadius - User mailing list archive at Nabble.com.