A network engineer deploys 802.1X on access switches integrated with Cisco ISE. During a WAN outage, the switches lose connectivity to all ISE PSNs. The business requires that already-authenticated endpoints keep working and that newly connecting devices in the manufacturing area still receive limited network access even when ISE is unreachable. Which switch feature should the engineer configure to meet the requirement for new devices?