Hi Volodymyr, > So, the question - is there way to match connection by different EAP ids > when using eap_radius? Only via remote.groups/class attributes, see [1]. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius#Group-selection