Cloud delivered access
AssigneeCisco Technology, Inc.
InventorsMuninder Sambi, Anand Oswal, Sanjay Kumar Hooda
Life of this patent
Estimating the term…
Abstract
Cloud delivered access may be provided. A network device may provide a client device with a pre-authentication virtual network and a pre-authentication address. Next, a policy may be received in response to the client device authenticating. The client device may then be moved to a post-authentication virtual network based on the policy. A post-authentication address may then be obtained for the client device in response to moving the client device to a post-authentication virtual network. Traffic for the client device may then be translated to the post-authentication address.
Claims17
A method comprising:
- providing, by a network device, a client device with a pre-authentication virtual network and a pre-authentication address;
- receiving a policy in response to the client device authenticating wherein the policy is selected by a policy server based on identity information received from an identity server in response to the client device authenticating and from the pre-authentication address of the client device and a Media Access Control (MAC) address of the client device received from the network device;
- moving the client device to a post-authentication virtual network based on the policy;
- obtaining a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- and
- translating traffic for the client device to the post-authentication address.
A system comprising:
- a memory storage;
- and
- a processing unit coupled to the memory storage and disposed in a networking device, wherein the processing unit is operative to:
- provide a client device with a pre-authentication virtual network and a pre-authentication address;
- receive a policy in response to the client device authenticating;
- move the client device to a post-authentication virtual network based on the policy;
- obtain a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- translate traffic for the client device to the post-authentication address;
- and
- send a renew for the post-authentication address in response to the client device sending a renew for the pre-authentication address.
A non-transitory computer-readable medium that stores a set of instructions which when executed perform a method executed by the set of instructions comprising:
- providing, by a network device, a client device with a pre-authentication virtual network and a pre-authentication address;
- receiving a policy in response to the client device authenticating wherein the policy is selected by a policy server based on identity information received from an identity server in response to the client device authenticating and from the pre-authentication address of the client device and a Media Access Control (MAC) address of the client device received from the network device;
- moving the client device to a post-authentication virtual network based on the policy;
- obtaining a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- and
- translating traffic for the client device to the post-authentication address.
Dependencies are inferred from the claim text.