Freeradius 802.1x - PEAP authorization with only wifi clients certificate, how?

Question

WiFi

Given:
ubuntu 18.04
FreeRADIUS Version 3.0.16
User databases AD+MySQL+files Freeradius is configured

, when connecting to the network, the user enters the VLAN in the group of which he is (currently without using certificates), everything works, but there is a need to strengthen the protection of connections through WIFI i.e. issuing a certificate for connecting via wifi, and do not check for wired connections for certificates.

How to specify in freeradius that if the connection is via wifi, then check the certificate? It would be desirable to distribute certificates through GPO.

Answer 1

Really did not find any information about EAP-TLS?