Method and apparatus to detect and block unauthorized mac address by virtual machine aware network switches

A system for verifying identity of a virtual machine (“VM”), the system comprising:

• a processor circuit;
• a memory circuit in communication with the processor circuit, the memory circuit storing a program code executable on the processor circuit, the program code configuring the processor circuit to:
• receive an initial message at a first VM from an associated switch, the initial message relayed through a second VM, the first VM managed by a first hypervisor;
• querying the switch configuration to determine if a port communicating with the first hypervisor is a trusted port;
• if not a trusted port, retrieve data relating to the initial message from a database;
• query the data to determine whether the initial message arrived through a port in communication with the first hypervisor;
• verify identity of the first VM if the initial message is routed through the port communicating with the first hypervisor;
• and
• validate the first VM address by querying the data to ascertain an attribution match on at least one of first VM MAC Address, VM UUID, switch port address or switch ID.

A non-transitory computer-readable medium comprising instructions configured to cause a computer to:

• receive an initial message at a first virtual machine (“VM”) from an associated switch, the initial message relayed through a second VM, the first VM managed by a first hypervisor;
• querying the switch configuration to determine if a port communicating with the first hypervisor is a trusted port;
• if not a trusted port, retrieve data relating to the initial message from a database;
• query the data to determine whether the initial message arrived through a trusted port in communication with the first hypervisor;
• verify identity of the first VM if the initial message is routed through the trusted port in communication with the first hypervisor;
• and
• validate the first VM address by querying the data to ascertain an attribution match on at least one of first VM MAC Address, VM UUID, switch port address or switch ID.