But why

Alan DeKok aland at deployingradius.com
Thu Oct 3 13:04:37 CEST 2019


On Oct 3, 2019, at 5:45 AM, Alberto Martínez Setién <alberto.martinez at deusto.es> wrote:
> I thought that default_eap_type worked that way

  No, it works the way it's documented to work.  The default_eap_type is what the server *suggests* that the client use.

  If you read the debug output, you would see that the client sends a NAK to that request, and instead asks for a different EAP type.

  But even then, default_eap_type applies to *EAP*.  It doesn't apply to PAP or MSCHAPv2.

> Does iOS prefer doing TTLS + MS-CHAPv2 over TTLS-PAP?

  Generally, yes.  Why?  Ask Apple.  We didn't write iOS.

> There is no way of letting it know the preferred method without the use of a WiFi profile?

  Generally, no.  Why?  Ask Apple.  We didn't write iOS.

> I believe that this is an answer to my question before. But is it really so? Does the iPad always do TTLS+MSCHAPv2 when trying to connect to an unconfigured 802.1x network?

  Why are you asking us that question?  We didn't write iOS.

  Alan DeKok.




More information about the Freeradius-Users mailing list