TLS errors and clients sometimes rejected

[Rodrigo Abrantes Antunes]

>   The systems should negotiate properly.
>
>   If FreeRADIUS works properly for every other device, and only one  
> device (or a small number of them) misbehaves, then the issue is the  
> device.


It's not one, it's around 400 devices, probably from students. I can't  
reject them. I will need to keep the old freeradius running then. Is  
it possible to configure a failover between two radius servers? If the  
user was rejected by the new one (beucause of old tls), try the old one?