Sorry, again; I checked the default site configuration and it is already logged in the post-auth phase: post-auth { update { &reply: += &session-state: } 802.1x_authz_log } Any ideas on this behavior?