Patent ID: 9043884
Filing Date: 2015-05-26
Classification: H04L

Abstract:
1. A method comprising: receiving, by a computer network device during neighbor discovery, a neighbor discovery package from a neighbor network device; determining, by the computer network device, a level of validation of the neighbor network device from the neighbor discovery package, the level of validation being for an interface of the computer network device connecting to the neighbor network device, extracting an authentication credential from the neighbor discovery package for the neighbor network device, and validating the authentication credential without interaction for the validating with any other network device between the extracting and the validating; automatically establishing a level of security for the interface of the computer network device connected with the neighbor network device based on the level of validation, different levels of security, including external and internal levels of security, being available for different levels of validation for the interface, in which all other communications from the neighbor network device are blocked until the level of security is established; in which the external level applies a first security policy restricting traffic addressed to an internal node and to network traffic an internal interface destined to an external interface the external interface corresponding to the neighbor network device of a different domain than the computer network device; and in which the internal level allows network traffic without the limiting of the first security policy from the neighbor network device of a same domain as the computer network device.