baffy200y <[EMAIL PROTECTED]> wrote: > I send Access-Request packet from radius client below. ... > And freeradius sends Access-Accept packet back below. ... > [Ascend-Data-Filter += "ip in forward dstip 172.16.1.0/24 0"] > [Ascend-Data-Filter += "ip in drop 0"] > [Ascend-Data-Filter += "ip out forward 0"] > > These lines are duplicate.
Run the server in debugging mode. You will see that it matches *two* entries in your "users" file (one of which you didn't post here). That's why there are duplicate attributes: you configured the server to send the duplicate attributes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

