Hello,
it "stays" in the guest vlan as shown in the output "after auth" but the problem is the phone moves to the voip vlan via lldp-med, which shouldn't happen since 802.1x failed.
Guests {
description "Guests";
vlan-id 13;
}
show ethernet-switching-options voip
interface access-ports {
vlan VoIP;
forwarding-class expedited-forwarding;
}