NAC 'enforce all' overwrites switch radius server secret.
NAC overwrites the radius configuration 'server secret' if this info doesn't match NAC's configuration. The result is different server secrets cannot be configured and maintained if NAC is able to overwrite this.
NAC S-Series SecureStack 7100 NAS radius configuration server secret
NAC expects all server secret configurations in the network to agree and upon 'enforce all' will overwrite the server secret if possible (S-series, SecureStack, 7100) - where NAC/NMS has access and ability to change switch configuration syntax
Keep all NAS radius server secret configurations consistent