A company wants users and devices authenticated before a wired switch port grants normal network access. Which mechanism fits?

1. NAT at the internet edge only
2. 802.1X port-based access control
3. A public DNS alias for the switch
4. An unrestricted unmanaged switch