A communication system, comprising: a control device; a policy management device that is configured to manage communication policy information and to notify, based on the communication policy information, the control device of a communication policy that corresponds to a user for whom authentication has succeeded; and a forwarding node that is configured to process, in accordance with packet processing rules set by the control device, packets transmitted from a user terminal, wherein the forwarding node is configured to receive a packet transmitted from a user terminal wherein authentication for the user has succeeded, and wherein the control device further comprises: a setting request transmission permitting unit that, based on a notification from the policy management device of a communication policy corresponding to the user for whom authentication has succeeded, is configured to set in the forwarding node that received the packet from the user terminal a first processing rule causing the forwarding node to make a setting request of a packet processing rule with regard to the packet transmitted from the user terminal; and a path control unit that, in a case of receiving the setting request from the forwarding node to which the first processing rule is set, is configured to determine a path from the user terminal to an access destination in accordance with said communication policy that corresponds to the user for whom authentication has succeeded, and to set in the forwarding node a second processing rule that corresponds to the path, the forwarding node being along the determined path. a control device; a policy management device that is configured to manage communication policy information and to notify, based on the communication policy information, the control device of a communication policy that corresponds to a user for whom authentication has succeeded; and a forwarding node that is configured to process, in accordance with packet processing rules set by the control device, packets transmitted from a user terminal, wherein the forwarding node is configured to receive a packet transmitted from a user terminal wherein authentication for the user has succeeded, and wherein the control device further comprises: a setting request transmission permitting unit that, based on a notification from the policy management device of a communication policy corresponding to the user for whom authentication has succeeded, is configured to set in the forwarding node that received the packet from the user terminal a first processing rule causing the forwarding node to make a setting request of a packet processing rule with regard to the packet transmitted from the user terminal; and a path control unit that, in a case of receiving the setting request from the forwarding node to which the first processing rule is set, is configured to determine a path from the user terminal to an access destination in accordance with said communication policy that corresponds to the user for whom authentication has succeeded, and to set in the forwarding node a second processing rule that corresponds to the path, the forwarding node being along the determined path. a setting request transmission permitting unit that, based on a notification from the policy management device of a communication policy corresponding to the user for whom authentication has succeeded, is configured to set in the forwarding node that received the packet from the user terminal a first processing rule causing the forwarding node to make a setting request of a packet processing rule with regard to the packet transmitted from the user terminal; and a path control unit that, in a case of receiving the setting request from the forwarding node to which the first processing rule is set, is configured to determine a path from the user terminal to an access destination in accordance with said communication policy that corresponds to the user for whom authentication has succeeded, and to set in the forwarding node a second processing rule that corresponds to the path, the forwarding node being along the determined path.