Setup Wired Self-Registration

8 min

Overview

Wired Self Register lets users register their own wired devices, so an administrator does not have to approve each one. Users sign in to the MyNile self-registration portal with their identity provider (IdP) and enter the physical MAC address of their device. Nile Cloud registers the device and places it in the segment you enable for self-registration. The device then connects through MAC Authentication Bypass (MAB).

Typical uses include student and resident devices, personal devices at desks, and devices that cannot sign in on their own, such as gaming consoles, smart TVs, and printers. A RADIUS server is not required. This feature is well suited to higher-education residence halls, hospitality, and multi-tenant corporate environments.

This page covers wired MAC self-registration only. For wireless self-registration, see UPSK and Self Registration.

How it works

Sign in. The user signs in to MyNile with corporate credentials through SSO.

Add the device. The user adds the physical MAC address of the device in Manage Wired Devices.

Nile Cloud registers the device. Nile Cloud maps the user to the device, registers it, and updates segment policy in real time.

Connect. The device connects to the network through MAB.

Prerequisites

Complete the following before you turn on Wired Self Register. Each step has a dedicated page with detailed instructions.

Configure a Service Area. Define the sites, buildings, and floors where you need Nile connectivity. See Setup Service Areas.

Configure DHCP. Choose Nile DHCP or an external DHCP server, and define the subnets your users will use. See Setup DHCP.

Configure Segments. Plan a dedicated segment for self-registered wired devices. See Setup Segments. See Setup Segments.

Configure SSO. Integrate your identity provider (IdP) with Nile. Users sign in through it to register a device. See Single Sign-On (SSO).

Configuration Steps

Enable Wired Self-Registration on a segment

In the left navigation, select Network Setup > Segments.

Click the '+' sign to create a segment, or click the pencil icon on the segment that users' devices will join.

Open the Advanced tab and turn on Wired Self Register. This setting allows users connected through wired ports to self-register their devices without administrator intervention.

Click Save.

Customize the portal (optional)

Match the self-registration portal to your corporate branding.

In the Nile Portal, go to Global Settings > Guest Portal.

Under Theme, set the Primary Color and Secondary Color.

Upload your Logo.

Set the Background to an image or a color.

Use the desktop and mobile preview to check the result, and save your changes.

Register a Device

Share these steps with your users.

Go to my.nilesecure.com and click the profile icon. The self-registration portal is also available from the Nile-hosted guest page and the Nile Portal.

Open the Manage Wired Devices tab and click Add device.

Enter the MAC address and a description of the device, and then confirm.

Connect the device to the wired port.

Nile checks the MAC address against the Nile Cloud database. If the address is registered, Nile places the device in the segment that has Wired Self Register turned on. If it is not registered, access is denied.

Manage Registered Devices

Users manage their own devices from MyNile.

In MyNile, open the Manage All Devices tab.

Review the device list. Each entry shows Status, Device, MAC Address, Name, Connection, Description, and Actions.

To remove a device, click the delete icon in the Actions column.

Each user sees only the devices on their own account. Deleting a device triggers an immediate Change of Authorization (CoA), which disconnects the device and forces full re-authentication.

Verify Registration in the Nile Portal

Administrators can track self-registered devices under Network Setup > Access Management > Wired. The table shows MAC Address, Rule, Device Type, Wired segment, Location, Switch, Port, Timestamp, and Status.

Stage	Wired segment	Status
Device connects, MAC address not yet registered	Empty	Waiting for approval
User registers the MAC address in MyNile	Self-registration segment (for example, BYOD)	Approved

To check connection health, use the device details in the Nile Portal, which include the data path and an events and status timeline. Users can see connection status, internet status, device details (IP address and MAC address), applications, and a speed test in MyNile.

Wired Self Register behavior

One segment for wired self-registration: Only one segment can be assigned for Wired Self Register. Each onboarding method requires its own segment, so the wired self-registration segment cannot also be used for wireless UPSK self-registration.

Dedicated segment: Use a dedicated segment for Wired Self Register. It cannot be used as the Wired SSO pre-authentication segment.

Use with Wired SSO: Devices without a browser that land in the Wired SSO pre-authentication segment as Waiting for approval can be authorized by the user through the self-registration portal.

MAC address accuracy: A MAC address can be copied. Map the self-registration segment to the access level that suits user-managed devices.

Admin view: Devices registered through the portal appear in the Wired table under Network Setup > Access Management > Wired. To remove a device, delete its entry from the table.