Alan DeKok wrote: Then use EAP-TTLS instead of EAP-TLS. You can then proxy the internal username/password information. With EAP-TLS, there is no username or password, so you can't proxy anything.

Thank you Alan. For some reason I thought, that with TTLS you are not able to use certificates on the client (only on the server). I was wrong. I'm using TTLS now. Thanks again. Wolfgang Burger