Patent ID: 9413772
Filing Date: 2016-08-09
CPC Classification: H04L,H04W

Claim Text:
1. A method comprising: detecting a rogue device in a network; sending a rogue device message that includes an identification of the rogue device to a plurality of switches in a backhaul of the network; adding the identification of the rogue device into a rogue monitor table including a learned status field indicating whether the rogue device is In-Net or Out-Of-Net; determining whether the rogue device is In-Net or Out-Of-Net using forwarding tables of the plurality of switches in the backhaul of the network and the rogue monitor table by removing entries in the forwarding tables that include a MAC address of the rogue device and determining whether a new learned MAC address in the forwarding tables is the MAC address of the rogue device; when it is determined that the rogue device is In-Net, performing mitigation of the rogue device using a nearest switch to the rogue device of the plurality of switches in the backhaul of the network; updating the rogue monitor table to indicate an identification of the nearest switch to the rogue device and updating the learned status field to indicate that the rogue device is In-Net.