eap inner-eap {
	default_eap_type = mschapv2
	timer_expire     = 60
	max_sessions = 2048
	md5 {
	}
	gtc {
		auth_type = PAP
	}
	mschapv2 {
	}
	tls {
		private_key_password = whatever
		private_key_file = ${certdir}/inner-server.pem
		certificate_file = ${certdir}/inner-server.pem
		ca_file = ${cadir}/ca.pem
		cipher_list = "DEFAULT"
		dh_file = ${certdir}/dh
		random_file = /dev/urandom
	}
}
