macOS 802.1x Radius Authentication, DHCP and VLAN Change

Good Morning Hivemind,

we're trying to change our network settings and policies to a 802.1x.

the connection is established wired.

1. You are pushed into a guest LAN
2. You get asked for Authentication
3. Radius checks for User Auth
4. If accepted you will be pushed in another VLAN
5. The mac should get a new IP, but it stays with the guest LAN ip.

We can see that the radius authentication works fine, but the mac doesnt do anything after the auth process. Status in systemprefs -> network -> ethernet just tries to authenticate, even if our radius logs that everything is done. There seems to be no difference if its a local machine user, oder a ad-user on the mac, the ad-user just doesnt ask for the auth user and password.

We've tried it with macOS Catalina and Big Sur.

Anyone has a clue how to fix this?

thanks and best regards, stay healthy.

p