I'm having troubles understanding the differences between the 3.
As far as I understand, with EAP-TLS, the client (peer) and the server (authenticator) both need a certificate. The authentication is done by performing basically a TLS handshake (which guarantees that the client is who he claims to be)
Whereas with EAP-TTLS, client authentication seems optional according to the RFC and the TLS handshake is only done to create a secure tunnel which can be used to perform other authentication methods. Is that right?
And how does PEAP now differ from EAP-TTLS? To my understanding, it does basically the same thing.