Segmenting networks by software allows for better enforcement of security policy. Endpoints should be classified by their identities rather than just their IP addresses. You can restrict access by assigning different roles, locations, and permissions for each device, which helps contain suspicious devices and give the right level of access to the correct people.

When you connect to a network, you must authenticate yourself with a username and password. The username identifies who you are, while the password verifies that you are who you say you are. Network authentication takes place at two levels:

At the physical level, devices send out signals that identify themselves to each other. Devices that need to communicate with each other establish a connection using these signals. A device might broadcast its presence by sending out radio waves, while another type of device might use infrared light or sound waves.

More info: What is Optical Network Terminal (ONT)?