Wired authetication with external radius

[AllInOne]

Hi all and sorry for my bad english... I have a little problem with my new installation.

This is the scenario:

Exsisting LDAP + Radius Server, exsisting Ubiquiti APs and a brand NEW OPNSense.

I confiured all and it works, the only problem I have is with Radius server on the wired connection.

For the WiFi i configured on the UniFi controller the radius server and WPA Enterprise authetication, when I try to connect it asks for user and password, if the user is in the "RADIUS ENABLED GROUP" in LDAP the connection will be ok, otherwise the user can't connect.

In reverse if i connect with the wire the captive portal ask me for the user, if I put an exsisting user outside the "RADIUS ENABLED GROUP" in LDAP the user can connect the same.

Any idea?

Thanks in advance.

Simone