System and method for identity based authentication in a distributed virtual switch network environment

摘要

An example method includes forwarding user credentials from a virtual machine in a distributed virtual switch (DVS) network environment to a network element outside the DVS network environment, receiving a user policy from the AAA server, and facilitating enforcement of the user policy within the DVS network environment. The user credentials may relate to a user attempting to access the VM. In a specific embodiment, the user credentials are provided in a 802.1X packet. In a particular embodiment, a network access control (NAC) in the DVS network environment forwards the user credentials, receives the user policy, and facilitates the enforcement of the user policy. In one embodiment, the NAC is provisioned as another VM in the DVS network environment.

主权项

1. A method executed by a network access control (NAC) in a distributed virtual switch (DVS) network environment, comprising:
forwarding user credentials from a virtual machine (VM) in the DVS network environment to a network element located outside the DVS network environment, wherein the user credentials relate to a user attempting to access the VM, wherein a plurality of tenants subscribe to one or more VMs hosted in the DVS network and the tenants share underlying infrastructure of the DVS network, wherein each tenant controls a separate NAC and a separate network element that can assure security of user authentication relevant to the tenant; receiving a user policy at the NAC from the network element, wherein the network element is configured with the user policy by a tenant controlling the NAC and the network element; and facilitating enforcement of the user policy within the DVS network environment.