eap {
	default_eap_type = peap
	timer_expire = 60
	ignore_unknown_eap_types = no
	cisco_accounting_username_bug = no
	max_sessions = ${max_requests}

	# TLS configuration section named "certs"
	tls-config certs {
		private_key_password = whatever
		private_key_file = ${certdir}/server.pem
		certificate_file = ${certdir}/server.pem
		ca_file = ${cadir}/ca.pem
		dh_file = ${certdir}/dh
		cipher_list = "DEFAULT@SECLEVEL=1"
		cipher_server_preference = no
		tls_min_version = "1.0"
		tls_max_version = "1.2"
	}

	# PEAP configuration referencing tls-config certs
	peap {
		tls = certs
		default_eap_type = mschapv2
		copy_request_to_tunnel = yes
		use_tunneled_reply = yes
		virtual_server = "inner-tunnel"
	}

	# TTLS configuration referencing tls-config certs
	ttls {
		tls = certs
		default_eap_type = mschapv2
		copy_request_to_tunnel = yes
		use_tunneled_reply = yes
		virtual_server = "inner-tunnel"
	}

	# MSCHAPv2 configuration
	mschapv2 {
	}
}