Jason L Frazier

US Patent:

7539189, May 26, 2009

Filed:

Oct 17, 2006

Appl. No.:

11/582786

Inventors:

Susan M. Sauter - Murphy TX, US
Jason D. Frazier - Raleigh NC, US
Cynthia D. Melter - Santa Cruz CA, US
Gregory Alan Moore - Sedalia MI, US
Ian Foo - Raleigh NC, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 12/28

US Classification:

370389, 709225, 713153

Abstract:

Disclosed are apparatus and methods for authenticating a device to access a network through an access control port. In one embodiment, one or more first authentication packets for authenticating a first device or user to access a first network domain via a particular access port of a network device are received, for example, by an access control port. The particular access port is configured to control access for packets attempting to ingress into one or more network domains. When the first device or user is authorized to access the first domain, a first binding between the first device and the first domain is formed. The first binding specifies that the first device is allowed to access the first domain and the first binding is associated with the particular access port of the network device. When a packet is received that is attempting to ingress into the first domain and the ingressing packet matches the first binding, the ingressing packet is allowed to access the first domain. In contrast, when a packet is received that is attempting to ingress into the first domain and the ingressing packet does not match the first binding, the ingressing packet is blocked from accessing the first domain.

US Patent:

20060209705, Sep 21, 2006

Filed:

Mar 17, 2005

Appl. No.:

11/083434

Inventors:

Susan Sauter - Murphy TX, US
Jason Frazier - Raleigh NC, US
Ian Foo - Raleigh NC, US
Gregory Moore - Sedalia MO, US
Troy Sherman - San Jose CA, US

International Classification:

H04J 1/16
H04L 12/66

US Classification:

370252000, 370352000

Abstract:

According to one embodiment, a method for removing authentication of a supplicant includes monitoring communication between the supplicant and an authenticator. The method also includes determining, based on the monitored communication, the MAC address for the supplicant and an attachment port of the supplicant to the intermediate network device disposed between the supplicant and the authenticator through which the monitored communication occurs. The method also includes determining that the supplicant no longer has a link connection with the intermediate network device, and in response, sending via the intermediate network device a logoff message having a spoofed source address of the supplicant to the authenticator.