PIX and RADIUS

Hi.
I have got a problem with my PIX 515E and RADIUS server. In the first, a CISCO's documentation is horrible for
setup VPDN users and AAA over RADIUS/TACACS+.
My configuration:
PIX 515E with 6.3(1), freeRADIUS 0.9.3 on LINUX.
I want to authenticate and authorize a VPDN user by this RADIUS. Athentication works fine. But when I send
ACL to PIX it does not work. Why?
On the PIX:
access-list mcygal-acl permit tcp host a.b.c.d host w.x.y.z
...
access-group outside_access_in in interface outside
...
aaa-server radius-authport 1812
aaa-server radius-acctport 1813
aaa-server RADIUS protocol radius 
aaa-server RADIUS (inside) host pc995 XXX timeout 10
...
vpdn group vpdn-group1 accept dialin pptp
vpdn group vpdn-group1 ppp authentication chap
vpdn group vpdn-group1 client configuration address local vpn-pool1
vpdn group vpdn-group1 client authentication aaa RADIUS
vpdn group vpdn-group1 pptp echo 60
vpdn enable outside
...
firewall# sh uauth
                        Current    Most Seen
Authenticated Users       1          1
Authen In Progress        0          3
vpdn user 'mcygal-vpn' at a.b.c.d, authenticated
   access-list mcygal-acl

On RADIUS:
mcygal-vpn      Auth-Type := Local, User-Password == "qqq"
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Filter-Id = "mcygal-acl"

>From PIX log:
Deny tcp src outside:a.b.c.d/3033 dst inside:w.x.y.z/80 by access-group "outside_access_in"


What parametrs can I send from RADIUS to PIX and by which attributes?
Can I send ip-pool, ip-address to VPDN user?
Or have you got some suggestion for mail-list?

Tank you very much.
Milan