MS switches can dynamically assign a VLAN to a client device by configuring the switch port to use the VLAN ID received via the RADIUS attribute Tunnel-Pvt-Group-ID https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772124(v=ws.10)?redirectedfrom=MSDN https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)#Dynamic_VLAN_Assignment
... View more