Paul Gregg wrote: > However on the APX, if I use clid-prefer, I can reject the connection ok, > but the APX simply accepts non-rejected connections without a username > or password. Not good. In ComOS an empty reply to a pre-auth ment ask again. In TAOS empty means don't ask as far as I know. To force a second request when the call is answered add the following to the pre-auth reply: Ascend-Require-Auth=Require-Auth -- Thomas C Kinnen - <tkinnen at lucentradius.com> <kinnen at lucent.com> [RADIUS Engineer] - LUCENT Technologies INS "All of the opinions stated above are my own and not my employer's, unless they were given to me by my employer" ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq>