Security

I have created two policies for eduroam users. 

1) For our local users, it uses EAP-TLS method since we are using cert based authentication for local users

2 My second policy is related to visitors from other institutions. All RADIUS requests will be forwarded to upstream federated eduroam servers, allowing the user's home institution to authenticate its users. For this policy, do I need to enable different EAP methods, such as EAP-TLS and EAP-PEAP, or should this process be transparent to us and not require any specific EAP methods to configure.

Thanks,