What EAP type to use on Public Wifi 802.1X?

Question

I understand you cannot use EAP-TLS for public wifi because the clients will not have their own certificates, therefore what EAP do you use, so that mutual authentication can take place?

Answer 1

I'm assuming that you want clients to connect with passwords. You want to use either PEAP or EAP-TTLS with MSCHAPv2 as the inner authentication method. You will probably still need to provide clients with a CA certificate to verify the server with.