hi, nostrip in the example.com in proxy.conf set the auth to LOCAL this will then get handled locally and the inner-tunnel will deal with the EAP properly. alan