System and method for network integrity
AssigneeTrapeze Networks, Inc.
InventorManish Tiwari
Life of this patent
Estimating the term…
Abstract
A technique for maintaining network integrity is disclosed. A system according to the technique may include a wired network, a switch, and a wireless access point. The switch can be coupled to the wired network and the wireless access point can be coupled to the switch. The system may further include a forwarding database that stores a mac address for a plurality of devices seen by the switch on the wired network. A method according to the technique may involve detecting identifying information of a device by a wireless access point. The identifying information can be compared with the mac addresses in a forwarding database. If the device is unknown, the unknown device can be classified as rogue and countermeasures can be taken against the rogue device.
Claims20
A system comprising:
- a wired network;
- a switch coupled to the wired network;
- a wireless access point coupled to the switch;
- and
- a forwarding database including a mac address for a plurality of devices having a wired connection to the wired network;
- wherein, in operation, identifying information of a device is detected by the wireless access point and compared with the forwarding database and the device is classified as rogue if the device is unknown in the forwarding database.
A method comprising:
- detecting identifying information of an unknown device;
- checking whether the identifying information matches wired network information;
- if the identifying information matches the wired network information,
- classifying the unknown device as rogue;
- and
- performing countermeasures against the rogue device.
A switch comprising:
- a memory;
- a processor, coupled to the memory, capable of executing modules and accessing data in the memory;
- a forwarding database located in the memory, the forwarding database including a mac address for each device seen by the switch on the wired network;
- a countermeasure module located in the memory;
- and
- a port for connecting to a wired network;
- wherein, in operation, identifying information of a device is compared with the forwarding database and if the device is unknown, the processor executes the countermeasure module and countermeasures are taken against the unknown device.
Dependencies are inferred from the claim text.