I assume you are talking about Dynamic VLAN Assignment based on user or machine network access control.
If so, the solution you seek is Cisco Identity Services Engine (ISE).
ISE can authenticate users and/or machines using the RADIUS protocol with MAC address, username/password, certificates or tokens (two-factor) credentials over wired, wireless, or VPN network devices. Enforcement options include not only VLAN assignment but also named or downloadable ACLs and TrustSec Scalable Group Tags (SGTs) as well as many other options (voice VLAN, MACsec, etc.) along with any feature available via RADIUS attributes.
We have a large number of ISE Design & Integration Guides for design, deployment and integration with many products.
