>> @inner-tunnel file: >> post-auth{ >> #exec # if remove comment nothing change >> get-vlan >> } >> >> >> Why not send the Tunnel-Private-Group-Id in tunneled, accept packet? No idea. Since it's working in users file and not listed as a module try: post-auth { update reply { get-vlan } } Ivan Kalik Kalik Informatika ISP