	eap {
		default_eap_type = peap
		timer_expire     = 60
		ignore_unknown_eap_types = yes
		cisco_accounting_username_bug = no
		tls {
			private_key_password = whatever
			private_key_file = ${raddbdir}/certs/site.pem
			certificate_file = ${raddbdir}/certs/site.pem
			CA_file = ${raddbdir}/certs/root.pem
			dh_file = ${raddbdir}/certs/dh
			random_file = ${raddbdir}/certs/random
		}
		peap {
		}
	}

