I have the same issue - full stack Omada (APs, router, switch, HW controller). I'm experiencing this with the built-in Radius server as well.

Issue #1: Built-in Omada Radius server uses EAP-MD5-Challenge by default. This method is compromised and deprecated, and declined by the client machine for that reason. Issue #2: Built-in Omada...

@ceejaybassist @Fae good one! And IDS/IPS?

Do we know what authentication method(s) the built-in radius server is able to process? I note that clients are presented with a self-signed TP-Link certificate. Would it use a user-provided...