aaa new-model
radius-server host 192.168.10.1 key 123rad
aaa authentication dot1x default group radius
dot1x system-auth-control
int fa 0/1
dot1x port-control auto
ip access list standard 10
permit 172.16.0.0 0.0.0.255
exit
vlan access-map vlan20 10
match ip address 10
action forward
exit
vlan access-map vlan20 20
action drop
exit
vlan filter vlan20 vlan-list 20