Dynamic vlan assignment with radius

Dear All!

How can i do this?

Radius with eap-tls so i create certificates for devices. But i would like that the switch automatically configure the proper predefined untagged vlan on the port for the device: for example: VOiP phones should be in vlan22 Printers in 23 Clients in 24

I can administer the macs i would connect to the network. For example create a group of mac address (or part of the mac) and i say this should be in the vlan 23 then i upload the precreated certificate onto the device and i connect to a switchport.

Can i do it with MS NPS? Or please suggest a solution to me.

Thanks