You are sending 2 sets of vlan attributes - maybe that is confusing the NAS . The way you are doing the stuff in users file means those attributes are present in all challenges too which isn't good alan