Quick-Start Guide
A step-by-step walkthrough to get the SiperOne platform running with your first access policy.
Prerequisites
You need a SiperOne console account, an Edge appliance or VM with two network interfaces, and a managed switch or wireless controller that supports RADIUS. Ensure the management interface has outbound HTTPS access to console.siperone.com for initial registration. A test VLAN and a test client device (laptop or phone) are recommended for verification.
Step 1 — Console Registration
Log in to the SiperOne console and create a new site. The console generates a unique registration token and displays the RADIUS shared secret. Copy both values — you will paste them during Edge setup. The console also provisions a default policy that places all unknown devices into a quarantine VLAN.
Step 2 — Edge Connection & ZTP
Connect the Edge appliance's WAN port to your uplink and the LAN port to your management network. Power on the device. It will obtain a DHCP address, contact the console using the factory-embedded bootstrap certificate and pull its configuration via Zero Touch Provisioning. Status LEDs turn solid green when the device is registered and policy-synced.
Step 3 — First Policy
In the console, navigate to Policies and create a YAML rule. Define a role (e.g. 'corporate-user'), match conditions (e.g. certificate CN suffix '@yourcompany.com') and an action (assign VLAN 100). Save and push the policy. The Edge receives the update within seconds and begins enforcing the rule on the next authentication request.
Step 4 — Testing & Verification
Connect your test client to the RADIUS-enabled SSID or switchport. Authenticate using 802.1X with the test certificate or MAB. Check the console's live-session view to confirm the client received the correct VLAN and policy. Review the authentication log for the full event record including timestamp, MAC address, identity and policy match.
Ready to get started?
Deploy AnchorSpot, AnchorNAC or AnchorLog in minutes with a free trial — no credit card required.