Hi, > Thanks, this helps with the clarity. What I think I need to do is > store the Inner-User-Name in the SSL cache so when the session later > gets resumed, we can use the Inner-User-Name to make a VLAN > decision. why does the VLAN change btw? based onwhere they are connected at the time? alan