IBM Tivoli and Cisco - Manual (Page 261)

Chapter 7. Network enforcement subsystem implementation 243
6. Click Submit + Restart.
Require client certificate for provisioning Checked
Allow Machine Authentication Checked
Machine PAC TTL One week
Allow Stateless Session Resume Checked
Authorization PAC TTL One hour
Allow inner methods
EAP-GTC Checked
EAP-MSCHAPv2 Checked
EAP-TLS Checked
Select one or more of the following EAP-TLS
comparison methods:
Certificate SAN comparison Checked
Certificate CN comparison Checked
Certificate Binary comparison Checked
EAP-TLS Session timeout (minutes) 120
EAP-FAST Master Server Checked
Actual EAP-FAST Server status Master
EAP-FAST configuration Condition