Hi, > So the Cisco DOES receive the attributes in the reply packet, but obviously > ignores them??
what does your CISCO IOS config look like for radius ? It appears that you may only have the authentication line and not the authorization line...eg aaa new-model aaa authentication login default radius local aaa authorization exec default radius local alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

