Abstract: A network access control (NAC) device enforces one or more policies for accessing one or more remote network devices. The NAC device includes a processor configured to receive authentication credentials from the user device over an L2 connection including first identification information of the user device, authenticate the user device using the authentication credentials, receive compliance information from the user device over an L3 connection including second identification information of the user device, associate the L2 connection with the L3 connection using the first identification information and the second identification information, and in response to determining that the compliance information satisfies the one or more policies, authorize the user device to access the one or more remote network devices.