I'm just excited that I got it to work. I extracted the certificates from my BGP-210 and now my Mikrotik RB5009 is doing the 802.1x authentication directly with AT&T's OLT. I had to set the ethertype ...
From here: A mode-conditioning patch cord is required. When using the WS-G5486 or GLC-LH-SM with 62.5-micron diameter MMF, you must install a mode-conditioning patch ...