Freeradius authentication with SSL client certificates

[Tom Yard]

Hi people, I wanto to implement a Freeradius authentication scheme, using
server and client SSL certificates: every client that require WiFI access
has to have a valid SSL certificate.

I think I have to use:

Authetication methos: EAP-TLS
Authentication protocol with NTLM: MSCHAP or MSCHAPv2

My clients are Windows, Linux and maybe Android.

Is my proposal correct ?

Thanking in advance.

Tommy