Sorry for crossposting, but problem not solved.
I used this example for making VPND server with radius auth for WinXP SP2 users - http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a008009436a.shtml
But users cant pass auth - in ACS logs i see what everything is ok - status in passed auths is - Authen OK.
Debug output and config file are in attach.
Thanks in advanced.