hi,
aaa new-model
radius-server host 10.239.16.34 key aruba123
dot1x system-auth-control
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 10.239.16.37 server-key aruba123
port 3799
auth-type all
ip dhcp snooping
ip device tracking
radius-server vsa send authenticat
exit
********************************************************************************
(config)interface vlan 1
ip address 10.239.17.38 255.255.252.0
ip helper-address 10.239.61.18
ip helper-address 10.239.16.37
exit
*************************************************************
interface gig 1/0/1
switchport access vlan 1
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout server-timeout 30
dot1x timeout tx-period 10
dot1x timeout supp-timeout 30
dot1x max-req 3
dot1x max-reauth-req 10
spanning-tree portfast
lldp transmit
lldp receive
exit
exit
enforcment prfoule it just vlan assignment
and
rasdius:cisco / cisco:avpair / device-traiffice-class-voice