diff --git a/docker/routlin-dash/app/pages/radius/content.json b/docker/routlin-dash/app/pages/radius/content.json
index a842d16..2dd1181 100644
--- a/docker/routlin-dash/app/pages/radius/content.json
+++ b/docker/routlin-dash/app/pages/radius/content.json
@@ -285,14 +285,22 @@
               "value": "%RADIUS_ALLOW_WEAK_EAP%",
               "hint": "Enables EAP-MD5. Required for switch port MAC-based 802.1X authentication."
             },
+            {
+              "type": "raw_html",
+              "html": "<div id=\"eap-tunneled-row\">"
+            },
             {
               "type": "field",
               "label": "",
               "name": "tunneled_reply",
               "input_type": "checkbox",
-              "checkbox_label": "Use tunneled reply (EAP-TTLS / EAP-PEAP)",
+              "checkbox_label": "Propagate inner tunnel reply attributes",
               "value": "%RADIUS_TUNNELED_REPLY%",
-              "hint": "Sets use_tunneled_reply = yes in EAP-TTLS and EAP-PEAP modules. Required for switch MAC authentication."
+              "hint": "Copies VLAN and authorization attributes from the inner EAP exchange to the outer RADIUS Access-Accept. Required by some switches for VLAN assignment to work correctly."
+            },
+            {
+              "type": "raw_html",
+              "html": "</div>"
             },
             {
               "type": "button_row",