Client Configuration
Why doesn’t PEAP or EAP-TLS work on a Windows machine?
The most common problem with PEAP is that the client sends a series of Access-Request messages, the server sends an series of Access-Challenge responses, and then nothing happens. After a little wait, the process starts again.
If you see this happening, stop!
The RADIUS server certificate has to have special OIDs in it,
otherwise the Microsoft clients will silently fail. See the
raddb/certs/xpextensions file in the server configuration for
examples, as well as the Microsoft
KB814394 article.
You must follow the requirements in the Microsoft article for for PEAP or EAP-TLS to work with a Windows machine.