Assigning users into different VLANs

Hi, I am using FreeRADIUS together with WLC from Cisco. I have 1 WLAN connected to 2 VLANs and I need to assign user into VLAN based on successful pass AAA or not. By that I mean to separate guests and members. How can I achieve that? For now I am using "users" as source of members. I came up wtih this "admin" Cleartext-Password := "admin" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 52, Tunnel-Preference = 0x000000 to assign member into VLAN 52 but I strugle with assigning VLAN for user without certificate or password (I need two variants based on certificate and PEAP, two different servers). Thank you for any advice. -- Martin