I am using NixOS on a MacBook Pro 11,1.
I can connect to a simple WPA2 Personal network, however when I try to connect to a WPA2 Enterprise network, it doesn’t work. nmcli says I’m connected, but pinging the public internet doesn’t work.
Pinging the gateway works and even DNS works with the assigned DNS servers (which are private network-local IPs).
Do you have access to logs for the access point or radius authentication server?
I’ve seen behavior where the client appears to be somewhat connected but can not actually do much. I traced it to invalid auth credentials being rejected by radius. In such a case I would have expected the access point to drop the link, but it did not. However, my experience with configuring WPA2 Enterprise networking is very limited.
Also have a look through system logs (using journalctl) in case there is a relevant message from the network stack.
I’m pretty sure the password is correct, because trying a different password causes it to not connect at all.
I unfortunately don’t have access to the AP logs.
In terms of system logs:
I am getting lots of logs from wpa_supplicant, though I don’t have it in my configuration (only networking.networkmanager.enable). The last logs from wpa_supplicant are wlp3s0: CTRL-EVENT-CONNECTED - Connection to (mac address redacted) completed [id=0 idstr=] bgscan simple: Failed to enable signal strength monitoring
NetworkManager logs show this: <warn> device (wlp3s0): Deactivation failed: GDBus.Error:fi.w1.wpa_supplicant1.NotConnected: This interface is not connected <warn> device (wlp3s0): Activation: (wifi) association took too long, failing activation <warn> device (wlp3s0): Activation: failed for connection 'VSBsecured'