Re: The EAP-TLS packet will contain more data than we can process

Jan Schermer / ET NETERA wrote:

Supplicant - do you mean Mikrotik AP or wpa_supplicant on the client?

wpa_supplicant.

I'm not sure what exactly Mikrotik does with EAP-TLS (and there are several options - EAP-TLS or passthrough, and verify cert. x don't verify cert x no certificate)

AP's just pass EAP packets back and forth. They don't do much more.

- I thought the AP doesn't care about certificates, only forwards it to the RADIUS service (I already set this up once on a different AP and it had no such options)

Yes. The problem is on the supplicant side, not on the AP. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog