#confdir = /usr/local/etc/raddb

eap {
	default_eap_type = tls
	timer_expire     = 60
	ignore_unknown_eap_types = no
	cisco_accounting_username_bug = no

	md5 {
	}

	tls {
		#private_key_password = seekritpassword
		private_key_file = ${confdir}/certs/wrt.key
		certificate_file = ${confdir}/certs/wrt.crt
		CA_file = ${confdir}/certs/ca.crt
		dh_file = ${confdir}/certs/dh
		random_file = /dev/random
		fragment_size = 1024
	}

	ttls {
		default_eap_type = md5
		copy_request_to_tunnel = no
		use_tunneled_reply = no

	}

	peap {
		default_eap_type = mschapv2
	}

	mschapv2 {
	}
}