EAP-TLS

Hi, I want to use EAP-TLS to verify client’s certificate and set policy based on the groups that the CN belongs to. How to do it? Thanks Jim