Hi,

I want to proxy requests to different servers, based on their authentication type - though they belong to the same realm.

How do I make EAP request for a realm go to one server and non-EAP requests for the same realm go to another server?

I think you could try to proxy every paket which is not yet known to be of an EAP authentication type and which doesn't contain an EAP-Message attribute to one server and everything that remains to the other one, e.g. with such entries in the users file: DEFAULT Auth-Type != EAP, EAP-Message !* ANY, Proxy-To-Realm := NON-EAP-Server DEFAULT Proxy-To-Realm:=EAP-Server If you want to not only have two servers but two servers per realm for several realms, maybe something like this could work: DEFAULT Auth-Type != EAP, EAP-Message !* ANY, Realm=foo,Proxy-To-Realm := NON-EAP-Server_for_foo DEFAULT Realm=foo, Proxy-To-Realm:=EAP-Server_for_foo Of course, you'd need to configure the additional realms NON-EAP-Server[_for_foo] and EAP-Server[_for_foo]. HTH, Stefan