eap {
	default_eap_type = peap
	timer_expire = 60
	ignore_unknown_eap_types = no
	cisco_accounting_username_bug = no
	max_sessions = 2048
	md5 {
	}
	mschapv2 {
	}
	tls-config tls-common {		certdir = ${confdir}/certs
		private_key_password = whatever
		private_key_file=/etc/zyxel/ftp/cert/dot1x-cert.pem.prv
		certificate_file = /tmp/dot1x-cert.pem
		ca_file = /var/zyxel/cert/https_trusted/https_trusted.pem
		tls_max_version = "1.2"
	}	tls {
		tls = tls-common
	}
	ttls {
		tls = tls-common
		default_eap_type = mschapv2
		copy_request_to_tunnel = yes
		use_tunneled_reply = yes
		proxy_tunneled_request_as_eap = no
		virtual_server = inner-tunnel
	}
	peap {
		tls = tls-common
		default_eap_type = mschapv2
		copy_request_to_tunnel = yes
		proxy_tunneled_request_as_eap = no
		use_tunneled_reply = yes
		virtual_server = inner-tunnel
	}
}
