On Mon, May 12, 2014 at 7:08 AM, Steve <steve at thupdi.net> wrote: > Yes, I know routes for group or user, but if I had routes in default > config, user and group specified routes seems couldn't override but > just append. > For example, default route is 192.168.1.0/24 and user1 has route > 0.0.0.0/0.0.0.0, could not let user1 got 'All traffic' mode. Indeed, but you can have no routes in the default config and move routing information to group configuration. Some users will belong to the all-route group and the others to the no-all-route group. regards, Nikos