eap { default_eap_type = peap timer_expire = 60 cisco_accounting_username_bug = no leap { } gtc { auth_type = PAP } tls { certdir = ${confdir}/certs cadir = ${confdir}/certs private_key_password = ********** private_key_file = /etc/freeradius/certs/radius.tmp_org.ru.key certificate_file = /etc/freeradius/serts/radius.tmp_org.ru.crt CA_file = /etc/freeradius/serts/tmp_org-ca.crt. dh_file = /etc/freeradius/serts/dh random_file = /etc/freeradius/serts/random #fragment_size = 1024 #include_length = yes #check_crl = yes #CA_path = /path/to/directory/with/ca_certs/and/crls/ # check_cert_issuer = "/C=GB/ST=Berkshire/L=Newbury/O=My Company Ltd" #check_cert_cn = %{User-Name} cipher_list = "DEFAULT" make_cert_command = "${certdir}/bootstrap" } ttls { default_eap_type = peap copy_request_to_tunnel = no use_tunneled_reply = no } peap { default_eap_type = mschapv2 } mschapv2 { } }