Hi, Not sure if you ever got this fixed. We found that we had to set a username that matches the cert even though we used EAP-TLS. Can you share some details on the 3850 bug - CSCux83859 - Switch fails dot1x when identity field in EAP ID response is ...

Hi Gordon, Not sure if this is an issue - thread is a little old, but your RADIUS timeout may be a little short, depending on your environment. You can try and set "timeout 10" and if successful drop it to a lower value if required. Cheers, Chris

Hi, Had the same issue, something to do with 2008. When you run topology services, it installs some additional software, but you usually don't have the rights to install. Run IE as administrator (left click, run as....) and start topology services. ...