> Is this the option? > EAP-TLS-Require-Client-Cert = Yes > I'm not sure where I should place it. Authorize section of inner-tunnel virtual server I think. Use unlang (update control ...). Ivan Kalik Kalik Informatika ISP