Hi, For some NAS i want to restrict the access for a single realm. For other NAS every realm is allowed. So I put in huntgroups: huntgroups: notebook NAS-IP-Address == 123.123.123.123, User-Name =~@willi.de This is only working, if the user has a Huntgroup-Name entry in the users file. users: bob Cleartext-Password := "hello", Huntgroup-Name =~note Is that correct? I understand the docs so, that the radius first looks into the hints file, than huntgroup and after that the realm is looked up. Hans -- Hans Bornemann Universitaet Dortmund - ITMC Tel. ++49 231 755 2132 Fax. ++49 231 755 2731