Defined them in the radgroupreply table and used the += in the op row in that table and voila .. Did'nt have to stick them in the users or hints files in the raddb conf dir ... See example ... rlm_pap: login attempt by "user@realm" with password test3 rlm_pap: Using password "userpassword" for user user@realm authentication. rlm_pap: Using clear text password. rlm_pap: User authenticated succesfully modcall[authenticate]: module "pap" returns ok for request 14 modcall: group Auth-Type returns ok for request 14 Sending Access-Accept of id 3 to clientipaddress:3390 Service-Type = Framed-User Framed-Protocol = PPP Cisco-AVPair += "ip:ip-unnumbered=Loopback51" Cisco-AVPair += "ip:addr-pool=ipnetpool2"