Document max_sessions

diff --git a/raddb/eap.conf b/raddb/eap.conf
index 48025ad..662b88b 100644 (file)
--- a/raddb/eap.conf
+++ b/raddb/eap.conf
@@ -58,6 +58,13 @@
                # zero byte.
                cisco_accounting_username_bug = no
 
+               #
+               #  Help prevent DoS attacks by limiting the number of
+               #  sessions that the server is tracking.  Most systems
+               #  can handle ~30 EAP sessions/s, so the default limit
+               #  of 2048 is more than enough.
+               max_sessions = 2048
+
                # Supported EAP-types
 
                #
@@ -370,7 +377,7 @@
                #  require a client certificate.
                #
                #
-               #  You can make TTLS require a client cert by setting
+               #  You can make PEAP require a client cert by setting
                #
                #       EAP-TLS-Require-Client-Cert = Yes
                #