# Network Access Control (NAC)

> Master Network Access Control (NAC), 802.1X authentication, RADIUS integration, and device posture assessment to prevent rogue device access.

Canonical: https://codelivly.com/rooms/network-access-control-nac
Last updated: 2026-09-04

| | |
|---|---|
| Level | Advanced |
| Category | Networking |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 200 |

Network Access Control (NAC) is the critical security layer that ensures only authorized, compliant devices can connect to the enterprise network. This module explores the advanced mechanics of NAC, including IEEE 802.1X authentication (EAP-TLS, PEAP), RADIUS server integration, dynamic VLAN assignment, and endpoint posture assessment. From a cybersecurity perspective, NAC prevents rogue devices, compromised endpoints, and unauthorized BYOD devices from accessing sensitive network segments. You will learn how attackers attempt to bypass NAC via MAC spoofing, EAP downgrade attacks, and rogue access points, and how defenders implement strict certificate-based authentication, device profiling, and automated quarantine policies to enforce zero-trust network access at the edge.

## Lessons

1. What Is Network Access Control and Why Does It Matter (30 min)
2. 802.1X Port-Based Authentication (30 min)
3. Guided Lab: Deploying 802.1X on a Switch (30 min)

## Related

- [Learning path: Network Security and Hardening](https://codelivly.com/learning-paths/network-security-and-hardening)
- [All rooms](https://codelivly.com/rooms)