EAP-TTLS/EAP-TLS with freeRADIUS

[Mr Dash Four]

> Addition: The first FreeRADIUS version to include native RADsec support
> will be 3.0. To use it with a version below that, you usually proxy your
> normal RADIUS request through a software like radsecproxy.
>   
Very interesting indeed. How about tunnelling (via ssh for example) - is 
that a similar technique?

> But again: this is normally only used between RADIUS servers across a
> insecure network and not betweens a client (meaning an AP or a
> modem-server, etc.) and its RADIUS server.
>   
If there is something I learned about such things, it is that when it 
comes to security issues one can *never* be too careful!