I'm using macauth. But how to assign a vlan on devices unidentified ?
Are you using 802.1x or macauth?
If you are sending an access-reject, you can't assign a vlan. Reject means "give no service". You either need to send an accept with a vlan, or look for a "reject vlan" feature on your switch.