The best I can think of is using IDM to assign port-based RADIUS assigned ACL's. It's a lot of effort to go to though if a 2600 can already do exactly what you want.
The 2600's just recently got the Dynamic IP Lockdown enhancement, hopefully the 5300xl will follow suit eventually.