The 2960 normally supports a dynamic vlan configuration, but essentially requires 802.1x- or MAB-based authentication
After authentication, based on the set authorization conditions, the specified vlan id can be assigned, thereby enabling a specific client to be divided into a specific vlan
Take Cisco's ise as an example, the authentication conditions, authorization conditions, authorization policies are defined on the ise, access switches only need to enable the interface 802.1x or mab authentication
802.1x can refer to the configuration manual for the appliance or search for relevant configuration examples
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_7_e/configuration_guide/b_1527e_consolidated_2960x_cg/m_sec_8021x_cg.html#ID732
