thanks a lot
i was very surprise, becouse doing some tests i realize when clearpass was not available, IAP sends other certificate to clients and then it is able to connect. Same bevahivor with NSP, but in this case Client can't connect. So, i thought relationship between IAP and Clearpass is more than just RADIUS standars.
do you have more details about this relationship?