Hi, you have defined the usual bits eg aaa new-model ! ! aaa authentication dot1x default group radius aaa accounting dot1x default start-stop group radius aaa accounting dot1x system start-stop group radius and you've got a radius-server entry with your RADIUS IP and some settings... but you are missing something - and i'm sure the switch logs would say so - or at least they would with some debug enabled: aaa group server radius XXXXXX server xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813 replace XXXXX with your RADIUS group name and xxx.xxx.xxx.xxx with IP of your server alan