NETWORK SYSTEM, CONTROLLER AND PACKET AUTHENTICATING METHOD

摘要

A controller managing a switch receives from the switch, a notice of an unknown packet sent from an access source host that is used by a plurality of users having different authorities. The controller inquires authentication data of a packet transmission user to the access source host. The controller inquires the permission or refusal of access to the access destination host based on the authentication data. When the access is permitted, the controller instructs the switch to register a flow entry of transfer of the packet. When the access is refused, the controller instructs the switch to register a flow entry of discard of the packet.

主权项

1. A network system comprising:
a switch configured to carry out processing of a reception packet based on a flow entry which defines a rule and an action to uniformly control packets as a flow; and a controller configured to issue an instruction of registration of the flow entry to said switch, wherein said controller carries out processing of determination of permission or refusal of transfer of a packet arriving at said switch based on authority of a transmission source of the arriving packet, and instructs said switch to register the flow entry of transfer of the arriving packet when the transfer of the arriving packet is permitted.