hi
i found a way to solve the problem and it is working:
You must configure an AAA Profile with user a derivation rule. (i think thats the usual way for the device fingerprinting.)
Then:
Configuration => Security =>Access Control
Creat a new Rule with you specific firewall configuration.
Choose the VLAN you want to assigne to a client wich matches into this rule unter "Role VLAN ID".
You have to create one rule for each vlan you want to assign.
Name the rule e.g. SET VLAN 4
Afterwards you have to configure the user derivation rule under:
Configuration => Security => Authentication => User Rules
Choose your specified rule, or create a new one with the dhcp device fingerprinting rules.
You choose your matching conditions and don't change the "Set Type". It should be "Role"
Under "Roles" you choos the mentioned above Role e.g. SET VAN 4.
So you should be able to derivate different vlans to different types of clients.
I tried it and it is working fine!