Hi, > My fault. > I can see Auth-Type through control list with > if ("%{Control:Auth-Type}" == "Reject") { > reject > } yes, well done - Auth-Type is not a RADIUS attribute, its a control attribute :-) alan