	eap {
		default_eap_type = peap
##		default_eap_type = tls

		timer_expire     = 60
		ignore_unknown_eap_types = yes
		cisco_accounting_username_bug = no

		tls {
			#private_key_password = whatever
			private_key_file = ${raddbdir}/certs/bob.keyunsecure.pem
			certificate_file = ${raddbdir}/certs/newcert.pem
			CA_file = ${raddbdir}/certs/cacert.pem
			dh_file = ${raddbdir}/certs/dh
			random_file = /dev/urandom

			fragment_size = 1024
			include_length = yes
		}

		ttls {
			default_eap_type = md5
			use_tunneled_reply = no
		}

		peap {
			default_eap_type = mschapv2
		}

		mschapv2 {
		}
	}

