# Misc
PidFile		C:\Program Files\Radiator\radius.pid
DbDir			C:\Program Files\Radiator


# Log error messages to the console 
Foreground
LogStdout
DictionaryFile	%D\dictionary

# This defines the %L token
LogDir		C:\Program Files\Radiator


# Default logfile for startup and other general messages.  
LogFile		%L\%m%d%y.log

AuthPort 1812,1645
AcctPort 1813,1646

# Set logging level
Trace   4


########## CLIENT DEFINITIONS ############


# Wireless access points
<Client 10.24.70.26>
	IdenticalClients 127.0.0.1
	Secret	lorax@musc
	DupInterval 0
	IgnoreAcctSignature 1
</Client>


<Client 128.23.36.1>
        Identifier vpn
        IdenticalClients 128.23.242.1
        Secret lorax@musc
        DupInterval 2
        NasType Cisco
        SNMPCommunity ccitxprivate
        IgnoreAcctSignature 1
</Client>



########## AUTHENTICATION HANDLERS ###########
<Handler Client-Identifier=vpn>
        AuthByPolicy ContinueAlways
        # AuthByPolicy ContinueWhileIgnore      # Default

       <AuthBy LSA>
		Domain CLINLAN
		DefaultDomain CLINLAN
		DomainController dc1.clinlan.local
	</AuthBy>
</Handler>

#### Wireless Clients using PEAP #####
<Handler TunnelledByPEAP=1>
	AuthByPolicy	ContinueUntilAccept
	
	<AuthBy LSA>
		Domain CLINLAN
		DefaultDomain CLINLAN
		DomainController dc1.clinlan.local
		EAPType MSCHAP-V2
	</AuthBy>	


	# Log it
#	AuthLog			wap-authlog
#	AcctLogFileName		%L\Acct\%Y-%m-%d-acct
</Handler>

<Handler TunnelledByTTLS=1>
	<AuthBy LSA>
		Domain CLINLAN
		DefaultDomain CLINLAN
		DomainController dc1.clinlan.local
		#EAPType MSCHAP-V2
	</AuthBy>


	# Log it
#	AuthLog			wap-authlog
#	AcctLogFileName		%L\Acct\%Y-%m-%d-acct
</Handler>


#### Wireless Clients using PEAP and EAP-TTLS #####
# This is also the default handler
<Handler>	
	AuthByPolicy	ContinueUntilAccept
 	<AuthBy FILE>
		#Filename c:\Program Files\Radiator\users				
		EAPType PEAP,TTLS
		EAPTLS_PEAPVersion 0
		EAPTLS_CAFile C:\Program Files\Radiator\certificates\demoCA\cacert.pem
		EAPTLS_CertificateFile C:\Program Files\Radiator\certificates\cert-srv.pem
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile C:\Program Files\Radiator\certificates\cert-srv.pem
		EAPTLS_PrivateKeyPassword whatever
		EAPTLS_MaxFragmentSize 1024
		AutoMPPEKeys
		SSLeayTrace 4							
 	</AuthBy>
	
	# Log it
#	AuthLog			wap-authlog
#	AcctLogFileName		%L\Acct\%Y-%m-%d-acct
</Handler>