nmcli d

nmcli con add type ethernet con-name [connection-name] ifname [interface-name] ip4

nmcli con mod [connection-name] 802-1x.eap tls 802-1x.client-cert [path to client cert] 802-1x.private-key-password [password] 802-1x.private-key [path to private key] 802-1x.identity [your identity] 802-1x.ca-cert [path to CA cert]

nmcli con up [connection-name]