usawebbox@fastmail.fm wrote:

I want to run two virtual servers on different ports, where one server allows PEAP-MSCHAPV2 and the other doesn't. It seems that only one eap.conf can be used.

No. You can have multiple instances of the EAP module, just like anything else: eap foo { ... } eap bar { ... }

I can see how to separate the Authorize and Authenticate sections, but I haven't seen any documentation on the syntax to select or reject auth types - let alone individual EAP types - within that file. I tried to make blocks for each server within eap.conf, but it didn't work. Is there a doc on the details of this feature, or some good examples online.

Configure two different eap modules. Then refer to "foo" or "bar", and not 'eap". The problem will solve itself. Alan DeKok.