4.0.217.0
Everything works great with a Lenovo T61 laptop running EAP-FAST using the IBM Access Connections client.
However a new out of box 7925G SCCP 1.3(3) phone shows "connection failed" onscreen to WLC 4.0.217.0 and ACS 5.1
Here is what the RADIUS log on Cisco Secure ACS 5.1 shows, TAC verified the ACS is good.
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
Evaluating Service Selection Policy
15004 Matched rule
15012 Selected Access Service - 7925s
11507 Extracted EAP-Response/Identity
12100 Prepared EAP-Request proposing EAP-FAST with challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12102 Extracted EAP-Response containing EAP-FAST challenge-response and accepting EAP-FAST as negotiated 12800 Extracted first TLS record; TLS handshake started.
12805 Extracted TLS ClientHello message.
12806 Prepared TLS ServerHello message.
12808 Prepared TLS ServerKeyExchange message.
12810 Prepared TLS ServerDone message.
12105 Prepared EAP-Request with another EAP-FAST challenge
11006 Returned RADIUS Access-Challenge
5411 EAP session timed out