Patent ID: 8799466
Filing Date: 2014-08-05
Classification: H04L

Abstract:
1. A method for automatic verification of a network access control construct for a network switch, the method comprising: accessing an actual network access control construct associated with a port on a network switching device, said actual network access control construct for defining whether a device is currently authorized by said network switching device to access said network switching device; accessing a machine-readable network map of a network that said network switching device is associated with, said map providing a pre-determined network access control construct defining whether the device should be authorized to access said network switching device; automatically verifying whether to modify the actual network access control construct to provide the device with authorization to access the network switching device and for verifying whether to modify the actual network access control construct to prevent the device from unauthorized access to the network switching device if the device is not authorized by comparing the actual network access control construct associated with the network switching device's port with the pre-determined network access control construct defined by said machine-readable map, wherein said machine-readable network map includes a plurality of network access control constructs and for each of said network access control constructs in the machine-readable network map the automatically verifying further comprises verifying that a corresponding actual network access control construct has been defined in the network's fabric, and that each of said actual network access control construct is based on a particular port of a particular network switching device and determining whether each World Wide Names (WWNs) defined in each of the actual network access control construct correspond to at least one WWN defined in at least one pre-defined network access control construct associated with the machine-readable network map; and providing the authorization to access the network switch and preventing the unauthorized access of the network switch by automatically correcting the actual network access control construct based on differences between the actual network access control construct and the pre-determined network access control construct that were determined by the comparing.