I think there maybe a couple of errors in the proposed template. This line has an extra "p" in the start-stop command: aaa accounting identity default start-stopp broadcast group dnac-client-radius-group group thirdparty This line seems to be missing...