eap {
	default_eap_type = peap
	timer_expire     = 10
	ignore_unknown_eap_types = no
	cisco_accounting_username_bug = no
	md5 {
	}
	leap {
	}
	gtc {
		auth_type = PAP
	}
	tls {
		private_key_password = whatever
		private_key_file = ${raddbdir}/certs/cert-srv.pem
		certificate_file = ${raddbdir}/certs/cert-srv.pem
		CA_file = ${raddbdir}/certs/demoCA/cacert.pem
		dh_file = ${raddbdir}/certs/dh
		random_file = /dev/urandom
		fragment_size = 1024
		include_length = yes
	}
	ttls {
		default_eap_type = md5
	}
	 peap {
		default_eap_type = mschapv2
		copy_request_to_tunnel = yes
		use_tunneled_reply = yes
		proxy_tunneled_request_as_eap = no
	}
	mschapv2 {
	}
}
