Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant functionality?

WebAuth, commonly known as a captive portal, is a widely used authentication method for devices that do not support 802.1X supplicant functionality. Users or device administrators open a web browser, are redirected to a portal, and authenticate using credentials validated against an AAA server.

MACsec (Media Access Control Security) is a Layer 2 encryption technology that ensures confidentiality and integrity of Ethernet frames but does not provide an authentication mechanism for endpoints against an AAA server.

Private VLANs are used to isolate ports within a VLAN at Layer 2 to enhance security by preventing direct communication between them, but they do not provide an authentication mechanism for endpoints.

Port security restricts access to a switch port based on MAC addresses or limits the number of devices allowed, which is a security control but does not perform user-based authentication against an AAA server.