identiFi controller doesn't send the Called-Station-Id in the format 00-01-02-03-04-05:SSID
identiFi controller doesn't send the Called-Station-Id in the format 00-01-02-03-04-05:SSID (where 00-01-02-03-04-05 is the BSSID of the AP radio.)
rfc3580 says it SHOULD not that it MUST
Capability not present
Upgrade to 9.21.17 or 10.31.02
Under VNS>Global>Authentication>Advanced enable "Override 802.1X authentication Called-Station-Id format with 'XX-XX-XX-XX-XX-XX:SSID'"
Note this functionality must be enabled because by default and after upgrade the capability will remain disabled to retain backwards compatibility, once enabled the capability will remain enabled and preserved through upgrade.