Your unlang is wrong. If both checks are true then you will reject...anything else, ie not a member of that group or from that NAS will continue alan -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120201/0cdde72a/attachment.html>