Hi Arran, I forgot to add the switch debug part. Here goes: -(snip)- Feb 27 22:13:26.738: %AUTHMGR-5-START: Starting 'dot1x' for client (0015.1751.6ec8) on Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF Feb 27 22:13:26.906: %DOT1X-5-SUCCESS: Authentication successful for client (0015.1751.6ec8) on Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF Feb 27 22:13:26.906: %AUTHMGR-7-RESULT: Authentication result 'success' from 'dot1x' for client (0015.1751.6ec8) on Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF Feb 27 22:13:26.914: %AUTHMGR-5-VLANASSIGN: VLAN 125 assigned to Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF Feb 27 22:13:27.015: MKA-LLI: Start Request Feb 27 22:13:27.015: MKA-LLI: handle: 0x25000582, mac: 0015.1751.6ec8, group: 0180.c200.0003 Feb 27 22:13:27.015: MKA-LLI: Zero length EAP Session ID Feb 27 22:13:27.015: %AUTHMGR-5-FAIL: Authorization failed or unapplied for client (0015.1751.6ec8) on Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF Feb 27 22:13:27.115: %AUTHMGR-7-RESULT: Authentication result 'linksec fail' from 'dot1x' for client (0015.1751.6ec8) on Interface Gi1/0/1 AuditSessionID 0A000001000005811721DCDF -(snip)- Best, Kilian