Use unlang for policy. Use that attribute (or define a unique client id and use that instead) in a policy %{client:shortname} %{NAS-IP-Address} etc etc are all available to be evaluated alan