eap-radius: use IKE_SA unique id instead of peer identity to manage virtual IPs