Re: TLS errors and clients sometimes rejected

The systems should negotiate properly.

If FreeRADIUS works properly for every other device, and only one device (or a small number of them) misbehaves, then the issue is the device.

It's not one, it's around 400 devices, probably from students. I can't reject them. I will need to keep the old freeradius running then. Is it possible to configure a failover between two radius servers? If the user was rejected by the new one (beucause of old tls), try the old one?