Cisco WLC + password hashing

I am using a Cisco WLC with freeradius and it seems, regardless of what I do to the eap config file, the combination of freeradius+Cisco 2504 only allows NTLM password hashing. I read that type of hashing is completely vulnerable now. So, is it worth implementing it at all or should I just use cleartext? Any other users here that have a Cisco WLC, what do you usually do in production deployments? Thank you.