Setup Switch Hostname and Port Auth
2 min
Overview
Switch Hostname + Port Authentication is a location-based rule rather than an identity-based rule. Instead of identifying each device by its MAC address, OUI, or fingerprint, you select a switch and one or more of its ports. Any device connected to those ports is automatically approved and assigned to the segment you choose, such as a VLAN.
Typical Use Cases
- Trade show booths
- Tenant spaces in shared buildings
- Training labs
- Pop-up or temporary offices
- Laptop imaging ports
Recommendation: This rule is not recommended for corporate devices.
Highest Priority Rule: Devices connected to designated ports are assigned to the segment specified by this rule, even if they were previously configured for a different segment.
Configuring Switch Hostname + Port Authentication
- Log in to the Nile Portal. In the left navigation, select Network Setup > Access Management > Wired, and click '+' to Add Device.
- From the Select dropdown, select Switch Host Name.
- Configure the following:
- Select segment: Select the segment these ports should use. A segment is required.
- Geo scope: Select the site, building, or floor where the switch is located (for example, a specific floor).
- Switch Host Name: Select the hostname of the switch from drop down.
- Ports: Select one or more ports by selecting respective checkboxes. At least one port must be selected. Greyed-out ports are not available for selection.
- Tag (optional): Enter a tag to help identify the rule.
- Confirm the fixed settings:
- Lock To Port is selected automatically and cannot be changed.
- Status is set to Approved and cannot be changed.
- Static IP and Passive are not available for this rule. Leave Allow all MACs cleared.
- Click Submit.
Rule behavior
- Status: Always Approved. Lock To Port is always on, so a device is tied to the mapped port it connects to. Allow all MACs, Wired SSO, Static IP, and Passive do not apply to this rule.
- Existing device entries: If a device already exists in another segment and plugs into a mapped port, its segment is updated. The event "Device auto approved by switch hostname rule" is shown on the device details page.
- Disconnect and reconnect: When a device is unplugged, Nile removes its entry. If it is plugged in again, it is approved again.
- Rule order: Switch hostname + port is evaluated first, before exact MAC address, fingerprint, OUI, and catch-all rules.