Paul,Thanks for this pointer. I'm facing the exact same issue detailed by the OP and come to think of it, my Policy Set uses two conditions: Wireless_MAB AND Radius-Called-Station-ID EQUALS <SSID>.So I removed Wireless_MAB from the top level. Will gi...