what exactly are you asking for here? you want to know if it is possible or do you want a whole design done?
as Tim already suggests it is something you want to setup with a partner or SE. there are many things to think about and to test before rolling it out through a whole company.
in my experience a proof of concept would be a good first step, get a trial clearpass setup and see if your switches support the needed functionallity. ClearPass can do this easily, but a lot depends on your clients (desktops, printers, ...) and your switches. and then just Cisco and subtype is not enough.
when i look at the 2960 with LAN base firm it seems to support some of the important parts:
Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass and web authentication using a single, consistent configuration.
RADIUS Change of Authorization and downloadable calls for comprehensive policy management capabilities.
but again, how well it works will have to be tested.