Hello, How are you calling the Tunnel processing in SBR? Are you using a realm suffix? My fear is the PPP sessions have the same format as the tunnel requests. By deafult the Tunnel section processes before anything else. You may need to flip when the Tunnels section is processed. In the radius.ini file under the [configuration] section set ProcessRealmBeforeTunnel =1. This way if the PPP sessions have a radius attribute that can differentiate the PPP requests from the tunnel requests you can setup a directed realm to handle the PPP authentication. ... View more