There is two different concept. The both above model support RADIUS while neither of them supports Dynamic VLAN.

Yes, I got Radius server authentication working, but clients aren't assigned to different VLANs if Tunnel-Private-Group-ID attributes are sent back by the radius server.

I got it working another way: by overriding port based VLANs with MAC address based VLANs in the manageable switch. This way clients who connect to the wifi and have a certain mac address are sent to a specific VLAN, regardless of the port.

Are there any other models that support radius attributes like "Tunnel-Private-Group-ID"?