When "WPA2-Enterprise with 802.1X authentication" is configured as the Association requirement on an SSID, each gateway AP in the network must be added as a RADIUS client on the RADIUS server. This permits the RADIUS server to accept RADIUS Access-request messages from the APs. The example below shows how to add a gateway AP as a RADIUS client in freeradius.
Edit the /etc/freeradius/clients.conf file and add either an individual client or a group via subnet using CIDR notation. The below screen shot shows an example of each. The secret should be the same secret configured in Dashboard for the radius server.