If TNC is enabled, EAP-TTLS will run a second EAP (TNC) inside the tunnel after a successful authentication.