manual

Use 802.1x Security with AT-WA7400 APs, AT-8624PoE Switches, and Linux’s freeRADIUS and Xsupplicant 4
radiusd.conf
mschap {
authtype = MS-CHAP
use_mppe = yes
require_encryption = yes
require_strong = yes
}
authorize {
preprocess
mschap
suffix
eap
files
}
authenticate {
Auth-Type MS-CHAP {
mschap
}
eap
}
clients.conf
client 169.254.4.0/24 {
secret = secret
shortname = wireless
}
eap.conf
eap {
default_eap_type = peap
tls {
private_key_password = whatever
private_key_file = ${raddbdir}/certs/cakey.pem
certificate_file = ${raddbdir}/certs/cacert.crt
CA_file = ${raddbdir}/certs/cacert.pem
dh_file = ${raddbdir}/certs/dh
random_file = ${raddbdir}/certs/random
}
peap {
default_eap_type = mschapv2
}
}
users
manager User-Password == friend