Authentication failed for Network Login MAC user

[MaKa71]

There is old EXOS switch X430-8p, it does not support Extreme Policy, but it supports netlogin and UPM features. I configured UPM profile in switch, Policy and Rule at NAC, also  inserted UPM profile name at port profile at NAC.

At NAC End-Systems table End-System is successfully authenticated and gets correct Profile:
( tcpdump created PCAP file ) RADIUS sends toward the switch:
Vendor-ID: 0x0000077C = 1916 (Extreme Networks)
Vendor-Type: 0xD4 = 212
Vendor-Length: 0x14 = 20
Vendor-Data: "UPM_VLAN_Printerid"

Switch log shows:
07/02/2026 14:19:26.01 <Info:nl.ClientAuthFailure> Authentication failed for Network Login MAC user D4B4C0622270 Mac D4:B4:C0:62:22:70 port 1

i used the 'RADIUS Attributes to send' -> 'Extreme Netlogin - VLAN Name'  at NAC

Does anyone have this ( netlogin + UPM without Policy  at EXOS switch ) setup working and what 'RADIUS Attributes to send' is in use ?

[MaKa71]

when i set Radius Attribute Policy Mapping: 

Extreme-Security-Profile=%PORT_PROFILE%

End-System will be unauthenticated.

From switch log i discovered ( when there was typo in profile name ) this instruction:
"Expected format - profile VLAN=test;QOS=qp1;LOGOFF-PROFILE=xyz; "

I played with different port profiles:
UPM_VLAN_Telefonid_event_auth;VLAN=Printerid_K62a;LOGOFF-PROFILE=UPM_port_event_unauth;
UPM_VLAN_Telefonid_event_auth VLAN=Printerid_K62a;LOGOFF-PROFILE=UPM_port_event_unauth;
without success: End-System remained unauthenticated.

Only when i changed Radius Attribute Policy Mapping to:
Tunnel-Type=VLAN
Tunnel-Medium-Type=802
Extreme-Netlogin-Vlan-Tag=%...%
Extreme-Security-Profile=%...%

End-System authenticated and UPM-s executed.

I wonder, why EXOS switch log included instruction "Expected format - profile VLAN=test;QOS=qp1;LOGOFF-PROFILE=xyz; " wich is not working.