All you really need to do is enabled EAP-FAST on the Radius server. If you are running a controller environment there isn't any changes on the controller needed. If you are running autonomous make sure you have both "authentication open..." and "authentication network-eap..." configured under the SSID. They only thing that would need to be changed would be the client. You could setup two profiles, one for TLS and the other for EAP-FAST.
Thanks for your information, currently i am using Cisco Appliance 1113 box. what is the requirement to setting up this EAP-TLS and EAP-FAST ? i have done the configuration with the necessary checks for EAP-FAST / TLS . but seems like only EAP-TLS working fine whereby EAP-FAST is failed.