Hello Leon - Your understanding of what Radiator does in this case is incorrect. If the AuthBy DYNADDRESS clause sees that there is a Framed-IP-Address already present in the reply packet, it leaves it alone and does not do any address allocation. This is to allow specific user definitions with a fixed IP address to take precedence.