Well.  There's no such thing as EAP-TLS/MSCHAPv2 . So I'd guess that your Android device is just doing PEAPv0/EAP-MSCHAPv2 or such and your config allows it to.  If you ran in full debug mode when connecting with the Android device you'd see exactly what's happening alan