...
wlan auth-server OR_Proxy_eduroamOT
radsec
ip openroaming-ap.eduroam.org # this is the real hostname
port 1812 # these don't matter, it is an ArubaOS artifact. The port used is TCP/2083.
acctport 1813 # these don't matter, it is an ArubaOS artifact. The port used is TCP/2083.
rfc5997 auth-only
service-type-framed-user 1x
# the certificates themselves need to be uploaded in the web interface (Maintenance -> Certificates -> Upload -> Client/Trusted CA)
wlan cert-assignment-profile
pki-cert-assign application radsec cert-type ClientCert certname RADIUS-TLS-Cert # "RADIUS-TLS-Cert" is the friendly name given to the client certificate during upload in the web interface (Maintenance -> Certificates -> Upload -> Client)
pki-cert-assign application radsec cert-type TrustedCA certname eduPKI-Root # "eduPKI-Root" is the friendly name given to the Trusted CA certificate during upload
Venue information in ANQP: "anqp-venue-name"
...