Patent ID: 7975048

Claim:
A method for controlling access to a computer network, comprising the following computer-implemented steps: monitoring signal traffic through at least one switch connecting at least one edge device to a remainder of the computer network to determine, without changing the signal traffic, for each of the at least one edge device, a MAC address, an IP address, and a port of the switch to which it is connected; providing to a first dynamic table within said at least one switch for each edge device, a MAC address, an IP address, and a port to which it is connected; providing an authentication server which includes a second table of user names and their relevant passwords used by Network Login, in which the second table, which includes User and Password information, also includes for each user name and password the corresponding virtual local network (VLAN) and/or VLAN tag membership and/or the Quality of Service (QoS); adding to the first dynamic table the user name, membership VLAN, VLAN tag and QoS information learnt from the authentication server in the second table.