Patent ID: 6965577
Filing Date: 2005-11-15
Classification: H04Q

Abstract:
1. A method of enforcing a network policy on a user connected by way of a respective edge switch to a packet-based communication network which has a network core and a plurality of edge switches, the method comprising: (a) enabling control message snooping for each of said edge switches; (b) obtaining the network address of said user; (c) forwarding to said user from a policy server a unicast request packet which has the network address of said user as a destination address, includes a control message protocol header that identifies said unicast packet as a request packet and includes a payload; (d) in response to reception of said request packet at said user, returning a reply packet which identifies said reply packet as a reply packet with an unmodified payload; (e) at said respective edge switch, responding to said reply packet to divert said reply packet to a management agent for said respective edge switch; (f) modifying said payload; (h) returning to the server said reply packet including said payload as modified, said reply packet as returned to said server containing an identification of said respective edge switch and said user; and (h) providing said network policy to said respective edge switch for controlling said user.