9. Common Workflows

Connect your first switch (802.1X with passwords)

1. VLANs — define your VLANs.
2. Groups — create a group with its default VLAN.
3. Users — create the local RADIUS users.
4. Clients / NAS — add the switch with its shared secret.
5. Configure 802.1X on the switch, pointing at the appliance (1812/1813 UDP).
6. Verify live sessions in SOC / NOC.

Go passwordless with EAP-TLS (NPS + PKI style)

1. CA / Certificates — create the internal CA (or import your existing one).
2. Issue machine/user certificates, or push them to the fleet via the Intune deployment package.
3. Clients / NAS — set the authentication method to EAP-TLS.
4. PCs authenticate with certificates; the Devices page shows them with their directory domain.

Segment IoT cameras into their own VLAN

1. Devices — check the cameras are classified as cctv (or set the group manually once).
2. Policies — new policy: condition device group = CCTV, action allow + dedicated VLAN.
3. Use Test / Preview with one camera’s MAC to confirm the match.
4. Enable MAB on the switch ports — cameras land in the camera VLAN wherever they are plugged in.

Guest Wi-Fi with vouchers

1. Captive Portal — create a Voucher profile with the guest VLAN and bandwidth limits.
2. Generate Vouchers — create a batch of codes.
3. Customize Portal Appearance (logo, colors, texts).
4. Hand the codes to the front desk; watch usage under Guest Sessions.