使用802.1x认证下开启ap本地转发, 用户上线失败

wac360无线控制器下配有2个service-template, 业务vlan都是使用vlan 13, 管理vlan使用 vlan 3

1. 使用普通psk密码认证的servie-template, 用户能够成功上线, 并且在 AC 下 dis arp, 显示用户所在的Interface是GE口, 的确是工作在ap本地转发模式下

<WAC360>dis arp
IP Address MAC Address VLAN ID Interface Aging Type
10.3.0.51 00e0-4c70-ac0b 3 GE1/0/2 19 D

2. 但是对于使用802.1x认证的servie-template, ac日志显示认证已经successful了, 但是用户端一直上线失败"Reason code is 1", 而且ac的日志里没看到分配ip. 

%Mar 11 08:55:37:903 2023 WAC360-8xiang-2 8021X/6/DOT1X_USER_START: -UserName=zhoulixin-IPAddr=0.0.0.0-IfName=WLAN-DBSS3:6-VlanID=13-MACAddr=2A:B9:E6:48:30:95-SSID=WIFI-2-APMAC=38:97:D6:04:80:A0-Type=0-NasId=-NasPortId=; User start authentication.
%Mar 11 08:55:38:173 2023 WAC360-8xiang-2 8021X/6/DOT1X_USER_AUTHEN_SUCCESS: -UserName=zhoulixin-IPAddr=0.0.0.0-IfName=WLAN-DBSS3:6-VlanID=13-MACAddr=2A:B9:E6:48:30:95-SSID=WIFI-2-APMAC=38:97:D6:04:80:A0-Type=0-NasId=-NasPortId=-Acl=-UserProfile=-SessiOnTimeOut=; User authentication successfully.
%Mar 11 08:55:38:185 2023 WAC360-8xiang-2 8021X/6/DOT1X_USER_ONLINE: -UserName=zhoulixin-IPAddr=0.0.0.0-IfName=WLAN-DBSS3:6-VlanID=13-MACAddr=2A:B9:E6:48:30:95-SSID=WIFI-2-Roam=0-APMAC=38:97:D6:04:80:A0-Type=0-NasId=-NasPortId=-Acl=-UserProfile=pay_user_100m-SessiOnTimeOut=; User got online successfully.
%Mar 11 08:55:38:185 2023 WAC360-8xiang-2 PORTSEC/6/PORTSEC_DOT1X_LOGIN_SUCC: -IfName=WLAN-DBSS3:6-MACAddr=2A:B9:E6:48:30:95-VlanId=13-UserName=zhoulixin; The user passed 802.1X authentication and got online successfully.
#Mar 11 08:55:38:188 2023 WAC360-8xiang-2 WMAC/4/Station Disconnect: Station Disconnect:1.3.6.1.4.1.25506.2.75.3.2.0.8<hh3cDot11StationDisconnectTrap> StaMAC:2A:B9:E6:48:30:95 StaMAC:2A:B9:E6:48:30:95 AP Name:3897-d604-80a0 BSSID:38:97:D6:04:80:A0 SSID:WIFI-2 SessionDuration:0 VLAN Id:13 APID:219801A0Q5915AQ00346 Radioid:1 Reason:other reason StaMAC:2A:B9:E6:48:30:95
%Mar 11 08:55:38:188 2023 WAC360-8xiang-2 WMAC/6/WMAC_CLIENT_GOES_OFFLINE: Client 2ab9-e648-3095 disconnected from WLAN WIFI-2. Reason code is 1.
%Mar 11 08:55:38:195 2023 WAC360-8xiang-2 RDS/6/RDS_SUCC: -IfName=WLAN-DBSS3:6-VlanId=13-MACAddr=2A:B9:E6:48:30:95-IPAddr=N/A-IPv6Addr=N/A-UserName=zhoulixin@eap_offload_auth_domain; User got online successfully.
%Mar 11 08:58:39:169 2023 WAC360-8xiang-2 8021X/6/DOT1X_USER_OFFLINE: -UserName=zhoulixin-IPAddr=0.0.0.0-IfName=WLAN-DBSS3:6-VlanID=13-MACAddr=2A:B9:E6:48:30:95-SSID=-APMAC=-NasId=-NasPortId=-Reason=wlan notify dot1x logoff; User logged off.

想请教下大家怎样能解决.