freeradius and ipa-server

Hello!

I want to use the IPA users to authenticate access to network devices. For example allow access to the management interface of a network switch or router.
I know that I can configure the network device to use radius for authentication.
But how do I configure freeradius to be able to talk to IPA server?
Is it ldap or kerberos config?

Have anyone an example?

I've got an IPA server on rhel7.

Thanks!