Integration of network admission control functions in network access devices

摘要

In one embodiment, a method includes receiving a communication from an endpoint device at a network access device located within a data path between the endpoint device and a network, identifying a network admission control policy for the endpoint device, enforcing at the network access device, the network admission control policy for traffic received from the endpoint device, and forwarding at the network access device, traffic from the endpoint device to the network in accordance with the network admission control policy. An apparatus is also disclosed.

主权项

1. A method comprising:
receiving a communication from an endpoint device at a network access device located within a data path between the endpoint device and a network; identifying a network admission control policy for the endpoint device, wherein identifying said network admission control policy comprises receiving policy information from a network admission control manager in communication with the network; enforcing at the network access device, said network admission control policy for traffic received from the endpoint device, wherein enforcing said network admission control policy at the network access device comprises utilizing a service template downloaded from the network admission control manager and locally configured at the network access device, the network admission control manager selecting the service template for the endpoint device and instructing the network access device to apply said service template to the endpoint device; performing continuous profiling operations at the network access device to identify the endpoint device, wherein said network admission control policy is based on identification of the endpoint device; and forwarding at the network access device, traffic from the endpoint device to the network, in accordance with said network admission control policy.