Patent ID: 7539189
Filing Date: 2009-05-26
Classification: H04L

Abstract:
1. A method comprising: receiving one or more first authentication packets for authenticating a first device or user to access a first network domain via a particular access port of a network device, wherein the particular access port is configured to control access for packets attempting to ingress into one or more network domains; forming a first binding between the first device and the first domain based on whether the first device or user is authorized to access the first domain, wherein the first binding specifies that the first device is allowed to access the first domain and the first binding is associated with the particular access port of the network device; either allowing or blocking an ingressing packet to access the first domain via the particular access port based on whether or not the ingressing packet matches the first binding; receiving one or more second authentication packets for authenticating a second device or user to access a second network domain via the particular access port of the network device: forming a second binding between the second device and the second domain based on whether the second device or user is authorized to access the second domain, wherein the second binding specifies that the second device is allowed to access the second domain and is associated with the particular access port of the network device: and either allowing or blocking the ingressing packet to access the second domain via the particular access port based on whether or not the ingressing packet matches the second binding.