Which would lead me to believe it's the network policy, but I altered the policy to create a catch-all condition and I still wasn't able to get it to match. When I switch to the mac-address as username, I'm able to see it matches the connection policy, but not the network policy. In the log file, I'm able to see that the fixed username is succesfully able to use the connection policy and then the network policy ( it works!). I am able to see the request attempted in the NPS log file. When I change the switch config to instead use the mac-address as the username and password, I get nothing in the event viewer at all. I'm able to see the authentication request in the NPS event log in server manager and everything is great. When I use the static username, I'm able to authenticate without any issues. In the switch config, I'm able to define whether I use a static username for all mac-authentications, or whether I simply replace the username and password variables with the mac-address of the requesting network card.
I've got a situation where I'm trying to get a switch ( 3Com 5500G) to authenticate to a NPS server for basic network access ( no dynamic vlan'ing or anything special ).