Does this cover wired as well as wireless?
Yes. 802.1X on a switch port is the same certificate check as on Wi-Fi, and the same certificate does both. Without it, anyone can plug into a network point in a meeting room and get on.
We've tested wired on real switches, including putting an authenticated device on a different VLAN from an unauthenticated one on the same port. See “How do I make a switch port default to Guest, but put authenticated devices on the staff VLAN?”. Read “Why is my Windows PC ignoring 802.1X on an Ethernet cable?” before you test, or it'll cost you the first hour.
Related questions
- How do I set up Microsoft sign-in (SSO) for Passbeam?
- What happens when somebody leaves?
- Can I stop one device getting on without revoking its certificate?
- Can I restrict a network to one group?
- Can I refuse devices that Intune says are not compliant?
- Which switches do 802.1X properly, and which ignore re-authentication?
- How do I set up BYOD so users can add their own devices?
- How do personal or BYOD devices get on the network?
- How can I see which devices are connected right now?
- Sessions are empty. What do I need to turn on?
- Why does a wired session show no IP address or data usage?
Still stuck? Ask us, or read the rest of the knowledge base.