AT-S63 Management Software Features Guide
Section VIII: Port Security 377
Here are guidelines for adding VLAN assignments to supplicant accounts
on a RADIUS server:
The VLAN can be either port-based or tagged.
The VLAN must already exist on the switch.
A client can have only one VLAN associated with it on the RADIUS
server.
When a supplicant logs on, the switch port is moved as an untagged
port to the designated VLAN.