A revision of EAP standard that encapsulates EAP traffic through a secure Tunnel. Easier to use than EAP TLS, but less secure