ok, it works now.<br><br>it was Tunnel-Medium-type = IEEE-802 instead of 802 only.<br><br><br>Now i can assign the sucessfull authenticated VLAN.<br>