aaa new-model
radius-server host 192.168.10.1 key 123rad
aaa authentication dot1x default group radius
dot1x system-auth-control

int fa 0/1
dot1x port-control auto

ip access list standard 10
permit 172.16.0.0 0.0.0.255
exit

vlan access-map vlan20 10
match ip address 10
action forward
exit

vlan access-map vlan20 20
action drop
exit

vlan filter vlan20 vlan-list 20