Captivo
802.1X Enterprise Network

Enterprise network access control with 802.1X

Let your employees connect to your wired and wireless network with their own username and password. Port-based control with WPA2/WPA3-Enterprise, EAP-PEAP and EAP-TTLS — with on-premise deployment.

See On-Premise Setup

How it works

1. Define users and groups

Create your 802.1X users and groups from the panel; assign a VLAN to each group.

2. Add switches and access points

Register your network devices as RADIUS clients; copy the server details from the panel.

3. Distribute certificate and profile

Download your own EAP CA certificate; apply the 802.1X connection profile to devices.

4. Connect

Users connect with the built-in 802.1X client on Windows, macOS, iOS, Android and Linux.

Why Captivo 802.1X?

  • Group-based automatic VLAN assignment (RFC 3580) — users land on their group's VLAN
  • Login with an Active Directory / LDAP account (EAP-TTLS) or a local user defined in the panel
  • MAC-Bypass admits devices that don't support 802.1X (printers, IP cameras) by MAC address
  • 15-minute account lockout after 5 failed attempts and a log of every login attempt
  • Your own EAP CA certificate is generated automatically and downloadable from the panel
  • Built-in client on Windows, macOS, iOS, Android and Linux — no extra software
AD/LDAP login →On-premise setup →

Frequently Asked Questions

Which EAP methods does 802.1X support?

EAP-PEAP-MSCHAPv2 (username/password) and EAP-TTLS-PAP are supported. With EAP-TTLS, users can also connect with Active Directory / LDAP accounts.

Which VLAN can I route users to?

You assign a VLAN ID to each 802.1X group; on successful authentication the user is automatically placed on that VLAN via RFC 3580 (Tunnel-Private-Group-Id).

What about devices that don't support 802.1X (printers, etc.)?

With MAC-Bypass you can admit these devices by their MAC address; no 802.1X client required.

How is this product deployed?

802.1X runs with an on-premise deployment. User, group and network-device management is done from the panel; see the On-Premise page for setup.

Add 802.1X access control to your network

Control your corporate wired and wireless network per user.

See On-Premise Setup