But why

[Alberto Martínez Setién]

> > > Wed Oct  2 17:57:23 2019 : Debug: (10) eap: Peer sent packet with
> method
> > > EAP NAK (3)
>
> client didnt like what was offered
>
> > > Wed Oct  2 17:57:23 2019 : Debug: (10) eap: Found mutually acceptable
> type
> > > MSCHAPv2 (26)
> > > Wed Oct  2 17:57:23 2019 : Debug: (10) eap: Calling submodule
> eap_mschapv2
>
> but was happy to do eap_mschapv2
>

So... how can I make the client like the offering and try TTLS-PAP?

> Pretty much standard. I expect TTLS + PAP, not MSCHAPv2
> >
> > Is this a normal outcome?
> > Why iOS doesn't try PAP?
>
> because 'clients' - was this client configured by a profile or was it
> configured by hand or was it configured
> by just trying to join the SSID?
>

Just by trying to join the SSID. There is not a chance for configuring by
hand in iOS.

I'll post a full debug later.