Can carry additional EAP or legacy authentication methods like PAP and CHAP. Integrates with the widest variety of password storage formats and existing password-based authentication systems. Wireless supplicants available for a large number of clients. TTLS features include: Dynamic Key Exchange; Mutual Authentication; Password-based Authentication; and, Encrypted Tunnelling.

unneling ransport ayer ecurity.  Allows older protocols that may still be in existence to be used when authenticating clients.  The protocol also allows for cryptographic keying between the client and access point.  It protects against eavesdropping, man-in-the-middle and other attacks against the cryptography.