On Fri, Mar 30, 2012 at 6:12 PM, IVB <i...@is.ua> wrote: > Agent-Circuit-Id = 0x000403fc0001
let's start with that one. > ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', x'000403fc0001', '==' ), Does that work? Shouldn't it be something like ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', 0x000403fc0001, '==' ), ? Another alternative is to insert something like this (note the operator) ( '00:12:23:56:78:9A', 'Agent-Circuit-ID', 0x000403fc0001, ':=' ), ... and then on authorize section add something like this (just for check) if ( (request:User-Name == "00:12:23:56:78:9A") && (control:Agent-Circuit-ID != "%{request:Agent-Circuit-ID}") ) { update control { Auth-Type := "Reject" } } then use debug mode again. It should print out what it recognize control:Agent-Circuit-ID (which is from db) and request:Agent-Circuit-ID. Then you just need to edit entry on db to match what's on the request. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html