We encountered this bug yesterday in a dot1x deployment with some old 2960x switches running 15.2(7)E.
the problem occurred when the ISE sent a AAA VLAN Overwrite to a switchport configured with portsecurity, which is enabled per default on dot1x swi...