Stephen Bowman wrote:

Is there a way to match on the EAP type in unlang?

Yes.

I need to be able to proxy everything except incoming eap-md5 requests (which need to be handled remotely).

And... no. That won't work. EAP *starts* the conversation before you know which EAP type it is. And you can't proxy half of an EAP conversation. That just confuses the home server. Alan DeKok.