Dennis Peng wrote: > Try adding "aaa authorization network default group radius" to your > config. Application of attributes in the Access-Accept is a function > of authorization, so it has to be enabled for us to process those > attributes. Dennis, thanks very much, that worked! -- Stephen