Jan Schermer / ET NETERA wrote: > Supplicant - do you mean Mikrotik AP or wpa_supplicant on the client?
wpa_supplicant. > I'm not sure what exactly Mikrotik does with EAP-TLS (and there are > several options - EAP-TLS or passthrough, and verify cert. x don't > verify cert x no certificate) AP's just pass EAP packets back and forth. They don't do much more. > - I thought the AP doesn't care about > certificates, only forwards it to the RADIUS service (I already set this > up once on a different AP and it had no such options) Yes. The problem is on the supplicant side, not on the AP. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html