There's the possibility to use Cisco ISE with Downloadable ACLs. (ACL based on Radius)Cisco Identity Services Engine Administrator Guide, Release 2.1 - Manage Authorization Policies and Profiles [Cisco Ide…Then there's APIs on Cisco Prime Infra for ...