Cloud delivered access
AssigneeCisco Technology, Inc.
InventorsMuninder Sambi, Anand Oswal, Sanjay Kumar Hooda
Life of this patent
Estimating the term…
Abstract
Cloud delivered access may be provided. A network device may provide a client device with a pre-authentication virtual network and a pre-authentication address. Next, a policy may be received in response to the client device authenticating. The client device may then be moved to a post-authentication virtual network based on the policy. A post-authentication address may then be obtained for the client device in response to moving the client device to a post-authentication virtual network. Traffic for the client device may then be translated to the post-authentication address.
Claims19
A method comprising:
- providing, by a network device, a client device with a pre-authentication virtual network and a pre-authentication address;
- receiving a policy in response to the client device authenticating wherein the policy is selected based on identity information received in response to the client device authenticating and from the pre-authentication address of the client device and a Media Access Control (MAC) address of the client device;
- moving the client device to a post-authentication virtual network based on the policy;
- obtaining a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- and
- translating traffic for the client device to the post-authentication address.
A system comprising:
- a memory storage;
- and
- a processing unit disposed in a network device and coupled to the memory storage, wherein the processing unit is operative to:
- provide a client device with a pre-authentication virtual network and a pre-authentication address;
- receive a policy in response to the client device authenticating wherein the policy is selected based on identity information received in response to the client device authenticating and from the pre-authentication address of the client device and a Media Access Control (MAC) address of the client device;
- move the client device to a post-authentication virtual network based on the policy;
- obtain a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- and
- translate traffic for the client device to the post-authentication address.
A non-transitory computer-readable medium that stores a set of instructions which when executed perform a method executed by the set of instructions comprising:
- providing, by a network device, a client device with a pre-authentication virtual network and a pre-authentication address;
- receiving a policy in response to the client device authenticating wherein the policy is selected based on identity information received in response to the client device authenticating and from the pre-authentication address of the client device and a Media Access Control (MAC) address of the client device;
- moving the client device to a post-authentication virtual network based on the policy;
- obtaining a post-authentication address for the client device in response to moving the client device to the post-authentication virtual network;
- and
- translating traffic for the client device to the post-authentication address.
Dependencies are inferred from the claim text.