> 1. Values in radreply seem to be ignored from the reply to AAA-client when > proxying packets? > Is this by design or have i configured something wrong? You should do it in post-proxy. > 2. Is it possible to do this in the post-proxy section of > /sites-enabled/default? Yes. List sql.authorize there. Ivan Kalik Kalik Informatika ISP