The EAP-TLS packet will contain more data than we can process

[Alan Dekok]

Jan Schermer / ET NETERA wrote:
> Supplicant - do you mean Mikrotik AP or wpa_supplicant on the client?

  wpa_supplicant.

> I'm not sure what exactly Mikrotik does with EAP-TLS (and there are
> several options - EAP-TLS or passthrough, and verify cert. x don't
> verify cert x no certificate)

  AP's just pass EAP packets back and forth.  They don't do much more.

> - I thought the AP doesn't care about
> certificates, only forwards it to the RADIUS service (I already set this
> up once on a different AP and it had no such options)

  Yes.  The problem is on the supplicant side, not on the AP.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog