The command mab needs to be added to enable MAC Authentication Bypass, which allows devices that don't support 802.1X (like printers) to authenticate using their MAC address instead. The config already has authentication order mab dot1x (telling the switch to try MAB first, then 802.1X), but without the mab command explicitly enabled on the interface, MAB won't actually run.