The users can still obtain IP addresses even if they fail to be authenticated

I have configured 802.1x authentication on the S6720. I find that computers can still obtain IP addresses if they fail to be authenticated. ( Although they can't access the Internet.)

Here is the related configuration on the switch, is there any error?

#

radius-server template rd1

radius-server authentication XX.XX.XX.XX 1812

radius-server accounting XX.XX.XX.XX 1813

radius-server shared-key cipher XXXXXX

radius-server authorization XX.XX.XX.XX shared-key cipher XXXXXX

#

aaa

domain do1

authentication-scheme radius

accounting-scheme radius

radius-server rd1

#

dot1x-access-profile name d1

authentication-profile name p1

dot1x-access-profile d1

access-domain do1 force

#

interface gigabitethernet 1/0/0

authentication-profile p1

#