IKEv2 eap with radius or ldap

Hello team,

Anyone has an idea when implementing an IPSEC tunnel using ikev2 and eap for user authentication against radius or ldap.

Does Fortigate terminate the eap messages, extracts the username and password the performs an access request to the radius server or bind to the leap?

Or the eap messages are forwarded to the remote authentication server inside the radius (like 802.1x) or ldap messages m