Сергей Усов wrote: > Thanks, Alan, it works. > > I have another question. Can I check the user's group for authentication > via TTLS? Put any group checking into the "inner-tunnel" server. That's what it's for. Alan DeKok.