' If I put them into radius then they can access all of our devices, not good.' Huh? Yes. It's not good which is why RADIUS servers have the abilities to define policies. Configure the RADIUS server so that people can only log in from the NAS they are authorised to do so from the locations allowed alan