...
That means if information on a user whose mobility domain is nsk.ru, radius-domain is root, and SSID is Eltex-Local gets on the server, the addresses eltex.nsk.ru and eltex.org will be added to default ones specified in the list of IP addresses that the user is permitted to access without portal authorization. That is, addresses included into the "permitted-ip-list" will be applied to a user if all keys specified within one "mobility-domain list" fully match.
If user parameters meet the criteria of several rules, this user will be permitted to access IP addresses from all these rules.
...