Methods and apparatus for implementing access control at a network switch

摘要

A switch device is configured to receive a data unit from a virtual port from a first set of virtual ports. The switch device is configured to associate an identifier of each virtual port from the first set of virtual ports with an identifier of a first access group that is associated with an access set. The switch device is configured to prohibit the data unit from being sent to a remaining virtual port from the first set of virtual ports if the data unit is addressed to that virtual port. The switch device is configured to otherwise allow the data unit to be sent to a virtual port from a second set of virtual ports associated with a second access group when the second access group is associated with the access set. The second set of virtual ports is mutually exclusive from the first set of virtual ports.

主权项

1. An apparatus, comprising:
a switch device configured to receive a data unit from a virtual port from a first set of virtual ports, the switch device configured to associate an identifier of each virtual port from the first set of virtual ports with an identifier of a first access group, the first access group associated with an access set, the switch device configured to prohibit the data unit from being sent to a remaining virtual port from the first set of virtual ports if the data unit is addressed to the remaining virtual port from the first set of virtual ports, the switch device configured to allow the data unit to be sent to a virtual port from a second set of virtual ports associated with a second access group when the second access group is associated with the access set if the data unit is addressed to the virtual port from the second set of virtual ports, the second set of virtual ports is mutually exclusive from the first set of virtual ports.