# US 8,751,650 B2 · Method and apparatus for supporting access control lists in a multi-tenant environment

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,751,650 B2
- Document ID: US8751650B2
- Status: Granted
- Kind: B2
- Application number: 13/468,739
- Filed: 2012-05-10
- Published: 2013-11-14
- Granted: 2014-06-10
- Earliest claimed: 2012-05-10
- Assignees: Cisco Technology, Inc.
- Applicants: Anuraag Mittal; Maithili Narasimha; Ashwin Deepak Swaminathan; Badhri Madabusi Vijayaraghavan
- Inventors: Anuraag Mittal; Maithili Narasimha; Ashwin Deepak Swaminathan; Badhri Madabusi Vijayaraghavan
- Web page: https://patentgrep.com/patent/US8751650B2

## CPC

- H04L 63/101: {Access control lists [ACL]}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

In one embodiment, a method includes identifying common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network, mapping parameter values for the variable ACL parameters to the tenants, generating a multi-tenant access control list for the tenants, storing the multi-tenant access control list and mapping at a network device, and applying the multi-tenant access control list to ports at the network device. The multi-tenant access control list includes the common ACL parameters and variable ACL parameters.

## Claims

### Claim 1

A method comprising:
identifying common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network;
mapping parameter values for said variable ACL parameters to said tenants;
generating a multi-tenant access control list for said plurality of tenants, the multi-tenant access control list comprising said common ACL parameters and said variable ACL parameters;
storing the multi-tenant access control list and said mapping at a network device; and
applying the multi-tenant access control list to ports at the network device.

### Claim 2 (depends on 1)

The method of claim 1 wherein the network device comprises a virtual switch in communication with virtual machines and the ports comprise virtual ports.

### Claim 3 (depends on 1)

The method of claim 1 wherein each of said plurality of tenants is associated with one or more virtual networks or virtual network segments.

### Claim 4 (depends on 1)

The method of claim 1 further comprising performing a lookup in a table comprising said mapping.

### Claim 5 (depends on 1)

The method of claim 1 further comprising programming said mapping into a port entry.

### Claim 6 (depends on 1)

The method of claim 1 wherein said parameter values comprise Internet Protocol (IP) address ranges.

### Claim 7 (depends on 1)

The method of claim 1 wherein said parameter values comprise virtual machine attributes.

### Claim 8 (depends on 7)

The method of claim 7 wherein the virtual machine attributes comprise addresses for the virtual machines.

### Claim 9 (depends on 1)

The method of claim 1 wherein the ports comprise port profiles defined within a virtual switch.

### Claim 10 (depends on 1)

The method of claim 1 wherein said parameter values comprise values learned on the network.

### Claim 11 (depends on 1)

The method of claim 1 wherein said parameter values comprise user defined values.

### Claim 12 (depends on 1)

The method of claim 1 wherein mapping parameter values to said tenants comprises mapping said parameter values to networks or virtual machines associated with said tenants.

### Claim 13

An apparatus comprising:
a processor for identifying common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network, mapping parameter values for said variable ACL parameters to said tenants, and generating a multi-tenant access control list for said plurality of tenants, the multi-tenant access control list comprising said common ACL parameters and said variable ACL parameters; and
memory for storing the multi-tenant access control list and said mapping;
wherein the multi-tenant access control list is configured for use at a virtual switch.

### Claim 14 (depends on 13)

The apparatus of claim 13 wherein each of said plurality of tenants is associated with one or more virtual networks or virtual network segments.

### Claim 15 (depends on 13)

The apparatus of claim 13 wherein the processor is further configured to perform a lookup in a table comprising said mapping.

### Claim 16 (depends on 13)

The apparatus of claim 13 wherein said mapping is programmed into a port entry.

### Claim 17 (depends on 13)

The apparatus of claim 13 wherein said parameter values comprise Internet Protocol (IP) address ranges.

### Claim 18 (depends on 13)

The apparatus of claim 13 wherein said parameter values comprise virtual machine attributes.

### Claim 19 (depends on 13)

The apparatus of claim 13 wherein mapping parameter values to said tenants comprises mapping said parameter values to networks or virtual machines associated with said tenants.

### Claim 20

Logic encoded on one or more non-transitory computer readable media for execution and when executed operable to:
identify common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network;
map parameter values for said variable ACL parameters to said tenants;
generate a multi-tenant access control list for said plurality of tenants, the multi-tenant access control list comprising said common ACL parameters and said variable ACL parameters;
store the multi-tenant access control list and said mapping; and
apply the multi-tenant access control list to ports at a network device.