This is the AAA config and switch ports:
aaa authentication login default group radius local
aaa authentication enable default enable
aaa authentication dot1x default group radius
aaa authorization console
aaa authorization exec default group radius local
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update newinfo
aaa accounting dot1x default start-stop group radius
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa accounting connection default start-stop group radius
aaa accounting system default start-stop group radius
no aaa accounting system guarantee-first
!
!
!
!
!
aaa server radius dynamic-author
client 10.70.11.13 server-key 7 xxxxxxx
*****
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server deadtime 10
!
radius server RADIUS
address ipv4 10.70.11.13 auth-port 1812 acct-port 1813
key 7 xxxxxxxxxxx
!
radius server RADIUS_BCK
address ipv4 10.70.13.13 auth-port 1812 acct-port 1813
key 7 xxxxxxxxxxxxxx
interface GigabitEthernet1/0/6
switchport access vlan 60
switchport mode access
switchport nonegotiate
switchport block unicast
switchport port-security maximum 4
switchport port-security maximum 2 vlan access
switchport port-security violation restrict
switchport port-security aging time 10
switchport port-security aging type inactivity
switchport port-security
authentication control-direction in
authentication event fail action next-method
authentication host-mode multi-host
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout tx-period 10
dot1x max-req 10
no cdp enable
spanning-tree bpduguard enable
