Hi Jarek,
A few items that you will want to make sure are set properly.
- Make sure that the device has authentication turned on for both the device and port
- If the switch is using VR-Mgmt, that needs to be specified when adding it to NAC
- If using MAC Authentication, the command 'configure netlogin add mac-list default' needs to be added so that all MAC authentication requests are sent to NAC.
Let me know if that helps at all.
Thanks,
Tyler