Hi my problem is I am trying to configure authentication with ldap + VLAN. according to the group the user is connected to what I want to send a VLAN, you need to know to begin testing is where I set this filter, I set in to ldap file? I already created some rules in the authorize section of inner-tunnel file: if(Ldap-Group == "xxx" && Tmp-Inreger-0 > 0) { update reply { #set VLAN attributes for that case Tunnel-Type = VLAN Tunnel-Medium-Type = IEEE-802 Tunnel-Private-Group-Id = 5 } #"Tmp-integer-0" is another rule that uses the Mac's customers How to configure the filter ldap groups? thanks!! and sorry for my english.