diff --git a/ops/nixos/bvm-radius/raddb/clients.conf b/ops/nixos/bvm-radius/raddb/clients.conf
index c6ec19d019..cc1207e48c 100644
--- a/ops/nixos/bvm-radius/raddb/clients.conf
+++ b/ops/nixos/bvm-radius/raddb/clients.conf
@@ -31,4 +31,5 @@ client eduroam_flr_server_2_v6 {
 client wireless_access_points_mgmt {
 	ipaddr = 92.118.30.0/24
 	secret = {{WLC_SECRET}}
+	add_cui = yes
 }	
diff --git a/ops/nixos/bvm-radius/raddb/mods-config/attr_filter/post-proxy b/ops/nixos/bvm-radius/raddb/mods-config/attr_filter/post-proxy
index 3ecddaf7e4..bf04e85cb9 100644
--- a/ops/nixos/bvm-radius/raddb/mods-config/attr_filter/post-proxy
+++ b/ops/nixos/bvm-radius/raddb/mods-config/attr_filter/post-proxy
@@ -116,4 +116,5 @@ DEFAULT
 	Idle-Timeout <= 600,
 	Calling-Station-Id =* ANY,
 	Operator-Name =* ANY,
-	Port-Limit <= 2
+	Port-Limit <= 2,
+	Chargeable-User-Identity =* ANY
diff --git a/ops/nixos/bvm-radius/raddb/sites-available/eduroam b/ops/nixos/bvm-radius/raddb/sites-available/eduroam
index 984b7202f7..124c1427ab 100644
--- a/ops/nixos/bvm-radius/raddb/sites-available/eduroam
+++ b/ops/nixos/bvm-radius/raddb/sites-available/eduroam
@@ -30,6 +30,9 @@ server eduroam {
 			reject
 		}
 
+		# Request Chargeable-User-Identity.
+		cui
+
 		# Send the request to the NRO for your region.
 		# The details of the FLRs (Federation Level RADIUS servers)
 		# are in proxy.conf.
@@ -59,6 +62,7 @@ server eduroam {
 	}
 
 	pre-proxy {
+		cui
 		attr_filter.pre-proxy
 		linelog_send_proxy_request
 	}