i am working with a customer who is using the on-board radius server on an RFS talking with AD.  we want to setup Dynamic VLAN assignments, what AD key value does our RFS use to make the VLAN assignment? according to the HOW-TO guide, the Tunnel-Private-Group-ID attribute from an external raduis is what an RFS uses to make the VLAN assignment.  What do we need to be setup in AD, when using the on-board server? Afshin