Hi Philip,
dot1x is a Layer 2 authentication where the client does not have an Ip address before authentication. Client gets an Ip address only AFTER the authentication is complete. i.e after the client has got EAP Success from Authenticator and encryption keys have been generated using WPA 4 way handshake.
Hope this helps,
Rahul