FYI: https://serverfault.com/a/693040/218902 *iOS clients* won’t support EAP-TTLS with PAP (only MsCHAPv2) unless you > manually (via a computer) install a profile. >