Hi, > VLAN ID assignment should be done in Access-Accept, not in > Access-Challenge. Try to compare Access-Accept sent by Cisco ACS and > Access-Accept sent by FreeRADIUS. yes - ours is in post-auth session (run via PERL) alan