FreeBSD + Freeradius2 + EAP-TLS + ssl-admin, a WPA2 Enterprise Guide.
epijunkie.com
guide
freeradius
wpa enterprise
This guide is written to help implement WPA2 Enterprise over a wireless network using only the most secure EAP protocol (EAP-TLS) for authentication. This is accomplished by using FreeBSD as a RADIUS server for 802.1X utilizing only EAP-TLS for verification. This guide doesn’t go into depth on how to secure and harden the FreeBSD machine much further, just enough to get freeradius2 using self-signed X.509 certificates configured and running.
This guide will also briefly touch on the wireless Access Point (AP) setup as an Authenticator and client (aka Supplicant) in 802.1X terminology) setup on Apple OS X and Android.