It should work without radius-mac-authentication, monitor /radius monitor <0> to find out whether any packets are send to RADIUS or not, when MAC RADIUS authentication is off. When EAP authentication is used (eap-method=passthrough), router should send these attributes in Access-Request, Access-Req...