server inner-tunnel {
authorize {
	filter_username
	sql
	chap
	mschap
	pap
	eap {
		ok = return
	}
	expiration
	logintime
}

authenticate {
	Auth-Type PAP {
		pap
	}
	Auth-Type CHAP {
		chap
	}
	Auth-Type MS-CHAP {
		mschap
	}
	mschap
	eap
}

post-auth {
	sql
	Post-Auth-Type REJECT {
		sql
		attr_filter.access_reject
	}
}
}