hi, if that guide is right, seems fairly simply, you just need to set Service-Type = NAS-Prompt-User Huawei-Exec-Privilege = "3" Login-Service = 50 can all be done via SQL replies, group replies or just in the users file. alan