Guest VLAN—Provides limited access to a LAN, typically just to the Internet, for nonresponsive end devices that are not 802.1X-enabled when MAC RADIUS authentication has not been configured on the switch interfaces to which the hosts are connected....
Guest VLANs can be configured on switches that are using 802.1X authentication to provide limited access—typically only to the Internet—for:
.....End devices that are not 802.1X-enabled
Nonresponsive end devices when MAC RADIUS authentication has not been configured on the switch interfaces to which the hosts are connected
Note: If the end device that is authenticated using the server-reject VLAN is an IP phone, voice traffic is not allowed.
http://www.juniper.net/documentation/en_US/junos13.3/topics/reference/general/authentication-process-flow-chart-ex-series-switches.html
According to the "Authentication Process Flow for EX Series Switches", the phone should get access to the guest vlan, which it did. After it gets access to the guest vlan, then the switch communicates the LLD-MED configured values. Can someone explain why the process is wrong based on the flow chart? or any other method?
See attached diagram.