A dynamic network policies system based on device classification is provided. The system comprises a computer system, a configuration database, and a dynamic network policies application based on device classification that receives a message from a virtual local area network access component containing a device identity certificate. The application parses the device identity certificate to discover a device classification, references the configuration database to determine a network policy associated with the device classification, and associates the network policy with a virtual local area network definition. The application also sends a reply containing the virtual local area network definition to the virtual local area network access component in response to the request, wherein access to network services is made available by association with a virtual local area network, and wherein association with a virtual local network is specific to the device classification and the network policy.