The fact that the clients went to "critical VLAN" indicate they may fail the authentication or fail to reach the Radius servers. It seems the clients were unable to recover when the Radius servers come back, may want to try to enable the Radius server monitoring function to see if this can help the switch bouncing the port and trigger the reauthentication for the clients again.
... View more