There is a problem of ineffective issuance of ACL for on-site 1x authentication. Unpaid users can still access the internet through authentication. Use unpaid users, pass 1x authentication, and view their 1x appearance. The Authorization ACL number in the representation is empty, and it is suspected that there is a problem with the ACL issued by the server side. The server side will capture the packet on site. The Radius2 message does not carry an authorized ACL.
Adjust the configuration on the server side to enable it to carry authorization ACL fault relief in the radius 2 message.