Thx to all, Here's the soluce : In cisco switch conf I've forgoten "aaa authorization network default group radius" wich is used for all network-related services such as VLAN assignment.
The correct Freeradius user conf : Login Auth-Type := EAP, User-Password == "password" Service-Type = Framed-User, Tunnel-Type =VLAN, Tunnel-Medium-Type =6, #or Tunnel-Medium-Type=802, Tunnel-Private-Group-ID ="Vlan-Name", ;) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html