diff --git a/files/sites-available/default b/files/sites-available/default
index bd463cc..fc00bd7 100644
--- a/files/sites-available/default
+++ b/files/sites-available/default
@@ -446,15 +446,6 @@ authorize {
 			Pool-Name := "engineers-%{sql:SELECT split_part('%{User-Name}', '@', 2)}"
 		}
 	}
-	#
-	# HARD CHECK: must have IP
-	#
-	if (!&reply:Framed-IP-Address) {
-		update reply {
-			Reply-Message := "No IP assigned - access denied"
-		}
-		reject
-	}
 	#  If you are using /etc/smbpasswd, and are also doing mschap authentication, the un-comment this line, and configure the 'smbpasswd' module.
 #	smbpasswd
 
@@ -809,7 +800,16 @@ post-auth {
 
 		sqlippool
 	}
-
+    #
+	# HARD CHECK: must have IP
+	#
+	if (!&reply:Framed-IP-Address) {
+		update reply {
+			Reply-Message := "No IP assigned - access denied"
+		}
+		reject
+	}
+	
 	# Query VLAN ID from your DB
 	# VLAN assignment is no longer used
 	#vlan_test