RADIUS Tunnel-Tag

Hi guys!

I've configured my Powerconnect 6248 switches for RADIUS and im using a Windows Server 2008 standard edition as a RADIUS server.
The switch seems to be forwarding the requests fine, but I can't quite get my client to authenticate properly. I have not configured a tunnel-tag, is this needed? (And what is the value?)

Switch port is in "automode".

My configuration so far:
Ignore User Dial-In Properties: True
Access Permission: Grant Access
Extensible Authentication Protocol Method: Microsoft: Protepted EAP (PEAP)
Authentication Method: EAP OR Unen....
NAP Enforcement: Allow full network access
Update Noncompliant Clients:
TrueFramed-Protocol: PPP
Service-Type: Framed
Tunnel-Assignment-ID: VLAN
Tunnel-Medium-Type: 802
Tunnel-Pvt-Group-ID: 3 (Policy is for VLAN 3)
Tunnel-Type: Virtual LANs

Error code is:

EventID: 15514
ErrorCode: 0x40420110
ReasonCode: 0x50005

ReasonText Explicit Eap failure received.
Also after some "tweaking" i got a message saying that the authentication failed due to a problem with my user account. (translated from norwegian).

The user account and comoputer is in the same group as the group specified in conditions.
Im thinking im missing a piece of the puzzle here... Any help appreciated!!

Goal: Get dynamic VLAN assignment to work....