Patent ID: 7398394
Filing Date: 2008-07-08
Classification: H04L

Abstract:
1. A method for a first node in a communications network to protect the communications network against malicious nodes, wherein the second node is connected by a communications link to a port of the first node, the method comprising: setting a status of the second node as untrusted at the first node; receiving a first network management message at the first node from the second node; in response to determining that the second node's status is set to untrusted, discarding the first network management message thereby protecting the communications network against malicious nodes; performing an authentication protocol with the second node, said authentication protocol including receiving at least one message from the second node over said communications link, wherein said at least one message is discarded if it does not form part of the authentication protocol; in response to determining that the authentication protocol was successful, setting the status of the second node as trusted; receiving a second network management message at the first node from the second node; in response to determining that the second node's status is set to trusted not discarding the second network management message.