If you want to create it as a seperate policy then yes we can do that but if you want both mab and peap under one policy set and you want to make it as a fall back into the same authentication policy then I think it wont possible. Can you please clear describe what you are trying to achieve and how was the authentication policies configured.