Just curious. Why aren't you using the same EAP server certificate across all of your RADIUS servers?
From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Linchuan Yang <linchuan.y...@concordia.ca> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Tuesday, October 31, 2017 at 10:28 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication Dear All Good morning. All of our IOS users start having authentication problem after they upgrading to IOS 11. The devices keep asking the user name and password. The only way we can fix for now is that “forget” the old profile, and manually create a new one, after trusting the certificate, the IOS 11 devices can connect to the wireless network. However, we have more than three radius servers, if the clients go to other buildings, they have to do this again. In some case, the clients have to repeat the procedure every morning when they come back to the office. We noticed that some related discussion on Cisco and Apple Communities. But there is not any solution for it. Do you have the same problem for your wireless network? Could you please give us some suggestions? Thank you, and have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.