Refer to the exhibit.

The issue with users configured for EAP-PEAP not being able to connect to the network, when a Cisco Wireless LAN Controller (WLC) is deployed using local EAP, typically points to a misconfiguration in the local EAP profile on the WLC. EAP-PEAP relies on a server-side certificate to create a secure TLS tunnel for the authentication process. If the local EAP profile is not correctly configured with the proper certificate or other necessary settings, the authentication process will fail, preventing users from connecting. References := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )