I have the same problem - Dell D600s and D610s with Broadcom. I am curious to know the cause of this.One bit of information I can add - when we installed a Nortel VPN client on a users PC, the Cisco VPN client would work!. Furthermore, when we switc...

I don't have a 2948L3 handy, but my recollecation is that the bridge configuration is more like a router than a switch (using bridge group commands rather than switchport commands).Given that, try the "show bridge " command.

What does the error in the "Failed Attempts" log say on the ACS server?Is there a single AD domain in your org? If there are multipel domains, could there be a user with the same username in another domain that ACS is checking first?

I am not an expert (yet) on the subject, but I'm planning on doing what you are doing, and from the reading I've been doing, Cisco's solution is to use 802.1x. This allows for both username and MAC-address based vlan assignment, using a RADIUS serve...