your switch config snippet is correct. are you using ClearPass ?
here is the technote that wrote that could help which covers the exact scenario.
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------