> The supplicant is using TTLS with MS->CHAP inside of the TLS tunnel.
>You edited the "inner-tunnel" virtual >server, and deleted "mschap" from
>it. Put it back.

And recall that you already know that you have to do EAP-TTLS/PAP because of your backend so reconfigure the client to do that. Your client is trying to do EAP-TTLS/MSCHAPv2 .

alan
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.