NAP / LEAP
At the ACS Server you can create Network Access Profiles (NAP) and choose which authentication you’re allowing.
You won’t see LEAP at NAP. This is a global setting at the System Configuration…
If you enable it with NAP, the client can do LEAP instead of the required authentication. (Like EAP-FAST for instance)
If you create a NAP and disable under protocols EAP-FAST, the client can’t do EAP-FAST.
Make sure the priority of the NAP is also correct.. If it’s matching the first NAP, it will sticks to that configuration.