I have discovered the solution to my problem is very straightforward. The detailed examples in the MAX's RADIUS manual that I followed are not complete! It is important to secure CLID only authentication entries with a check-item (i.e. on the first line of the radius entry) that requires the Calling-Station-ID to be the same as the username for the entry. sorry if this was obvious, but it might be useful to someone else following the examples in the manual. philip ross ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!--X-Follow-Ups-End--> <!--X-References--> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg10233.html">Re: (ASCEND) Ideas: Next Release Ap28 or Ap29</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg10232.html">(ASCEND) Digest?</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg10236.html">Re: (ASCEND) Radius and CLID security problem</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg10232.html">(ASCEND) Digest?</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="maillist.html#10234"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd222.html#10234"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>