#mude as linhas
...
log_auth = yes

log_auth_badpass = yes
log_auth_goodpass = yes
...
lower_user = yes
lower_pass = yes
...
#no módulo mschap adicione a linha:
authtype = MS-CHAP
#descomente e altere:
use_mppe = yes
...
require_encryption = yes
...
with_ntdomain_hack = yes
...
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{User-Name:-None}} --challenge=%{mschap:Challenge:-00} -- nt-response=%{mschap:NT-Response:-00}
...
#comente as linhas
#ippool main_pool {
   #range-start = 192.168.1.1
   #range-stop = 192.168.3.254
   #netmask = 255.255.255.0
   #cache-size = 800
   #session-db = ${raddbdir}/db.ippool
   #ip-index = ${raddbdir}/db.ipindex
   #override = no
   #maximum-timeout = 0
#}
...

## obs.: foram tiradas todas as linhas não usadas ##
client 127.0.0.1 {
   secret = 1234
   shortname = localhost
   nastype = other
}
client IP_do_AP{
   secret = senha_do_AP
   shortname = SSID_do_AP
   nastype = other
}
##obs.: quantos forem os AP`s, faça um novo módulo para cada um dentro deste arquivo

...
#mude
default_eap_type = peap

...
#comente
#leap {
#}
...
#descomente
challenge = "Password: "
...
tls {
    private_key_password = whatever
    private_key_file = ${raddbdir}/certs/cert-srv.pem
...
    certificate_file = ${raddbdir}/certs/cert-srv.pem
...
    CA_file = ${raddbdir}/certs/demoCA/cacert.pem
...
    dh_file = ${raddbdir}/certs/dh
    random_file = ${raddbdir}/certs/random
...
    fragment_size = 1024
...
    }
...
ttls {
   default_eap_type = md5
   copy_request_to_tunnel = no
   ...
   use_tunneled_reply = no
   }
...
peap {
...
   default_eap_type = mschapv2
...
   }

#altere a linha
DEFAULT Auth-Type = EAP
...

##comente as linhas

#DEFAULT    Service-Type == Framed-User
#   Framed-IP-Address = 255.255.255.254,
#   Framed-MTU = 576,
#   Service-Type = Framed-User,
#   Fall-Through = Yes