debug radius shows that the radius server has delivered the address pool attribute Framed-Pool (88), but the actual user still uses the address pool configured in the previous domain.
If the address pool configuration of the previous domain is deleted, users will not be able to obtain addresses from the pool.
Delete the address pool in the front domain and configure 802.1X authentication priority “ip subscriber authentication-method dot1x high-priority” under the interface