A. The NAS acts as a gateway for all Layer 3 traffic.
B. Only the MAC address is used to identify the client device.
C. User traffic remains on the same VLAN for the duration of the connection.
D. After authentication and posture assessment, client traffic no longer passes through the NAS.