Endpoints are devices of the Domain or Network Operator
They usually authenticated against AD/Mac/PSK/Dot1X --> L2 Authenticatios
Guests are the People who will be there on the Network for a Day or Two
They are authenticated with CaptivePortal/OTP --> L3 Authentication