The error you are getting "user access filtered" indicates you have "Network access restriction" applied on the ACS group. Look at the failed attempt and see what group you are being assigned to. Go to that group and uncheck NAR. If you want to keep NAR settings then you need to allow the ip/aaa-client in the devices list.
This should resolve your issue.
Regards,
Jatin Katyal
- Do rate helpful posts -
~Jatin