Patent ID: 8200798
Filing Date: 2012-06-12
Classification: H04L

Abstract:
1. A method, comprising: providing a plurality of switches in a network; providing a plurality of host devices for accessing the network; providing a database of host information, the database of host information accessible by at least one of the plurality of switches, the database of host information including a plurality of entries, each entry of the database of host information associated with a host device connected to the network through at least one of the plurality of switches, each entry further including a layer 2 address and a layer 3 address assigned to the respective host device; storing the database of host information in multiple switches in the network; synchronously updating the database of host information stored at the multiple switches when a change in topology of the network is detected based at least in part on a host device connectivity change in the network, the update to the database of host information distributed based on Service Advertisement Framework protocol; receiving a signal indicating that a new host device is connecting to the network through a given switch, the signal including a layer 2 address and a layer 3 address of the new host device; comparing, by a processor of at least one switch, the layer 2 address and the layer 3 address of the new host device to layer 2 addresses and layer 3 addresses stored in the database of host information; and if at least one of the layer 2 address and the layer 3 address of the new host device matches a layer 2 address or a layer 3 address of one or more entries of the database of host information, blocking the new host device from accessing the network.