Patent ID: 9712489
Date: 2017-07-18
CPC Classifications: H04L

Claim:
1. A non-transitory computer readable medium comprising instructions, executed by a hardware processor, to: detect an authentication request transmitted by a client device while the client device is assigned a first role such that the client device is associated with a first VLAN and DHCP requests received from the client device are forwarded to at least one DHCP server associated with the first VLAN; responsive to detecting the authentication request, assign the client device to a second role such that DHCP requests received from the client device in the second role are declined independent of availability of an internet protocol (IP) address associated with the first VLAN; and responsive to successfully completing authentication of the client device, assign the client device to a third role such that the client device is associated with a second VLAN and DHCP requests received from the client device are forwarded to at least one DHCP server associated with the second VLAN, wherein while the client device is assigned to the second role: receive a DHCP request from the client device; and decline the DHCP request from the client based on rules associated with the second role, wherein the rules include declining the DHCP request until an Extensible Authentication Protocol (EAP) success message is received from the client device.