virtual server configuration

[Alan DeKok]

usawebbox at fastmail.fm wrote:
> I want to run two virtual servers on different ports, where one server
> allows PEAP-MSCHAPV2 and the other doesn't. It seems that only one
> eap.conf can be used.

  No.  You can have multiple instances of the EAP module, just like
anything else:

  eap foo {
	...
  }

  eap bar {
	...
  }

> I can see how to separate the Authorize and
> Authenticate sections, but I haven't seen any documentation on the
> syntax to select or reject auth types - let alone individual EAP types -
> within that file. I tried to make blocks for each server within
> eap.conf, but it didn't work. Is there a doc on the details of this
> feature, or some good examples online.

  Configure two different eap modules.  Then refer to "foo" or "bar",
and not 'eap".  The problem will solve itself.

  Alan DeKok.