Setup Wired Authentication
Overview
Nile secures wired network access by requiring every device connected to a Nile switch to be authenticated before it can access the network. Wired authentication is always enabled and cannot be disabled.
You can configure one or more authentication methods based on your device types and security requirements. Once authenticated, each device is assigned to a network segment according to your configuration.
Use the table below to review the available authentication methods and choose the options that best fit your environment.
Option | Method | Best for |
|---|---|---|
1. MAC authentication bypass (MAB) | MAC address | Devices that don’t support 802.1X and require individual approval before or after connecting. |
MAC address list (CSV) | Approving multiple devices at once before they connect to the network. | |
OUI | All devices from one manufacturer | |
Allow all MACs | A catch-all for devices that match no other rule. | |
2. Fingerprint | Fingerprint | A type of device such as "HP printer" or "Vocera Phone" |
3. Switch hostname + port | Switch hostname + port | Any device plugged into specific switch ports. |
4. Wired Secured Guest & Wired SSO | Wired Secured Guest | Visitors and unknown devices authenticate through a captive portal and are fully isolated from the Nile network. |
Wired SSO | Employee-owned laptops and docking stations that authenticate through your identity provider. | |
Both together | A single captive portal for visitors and employees, with wired devices fully isolated from the Nile network. | |
5. Wired Self Register | Wired Self Register | Users who register their own devices |
6. Wired 802.1X | Wired 802.1X | Recommended for managed laptops and devices that support 802.1X, providing stronger authentication and security. |
7. MAC authentication with external RADIUS | RADIUS MAB | Customers who want to keep approving devices on their third party RADIUS server |