Patent ID: 7792990

Claim:
A method for remote client remediation, comprising: identifying, by a local network device, a client connected to the local network device and associated with an original VLAN and needing remediation; creating at the local network device an entry in a lookup table, said entry including a MAC address of the client, a flag indicating a remediation status of the client, information of the original VLAN, and a tunnel-encapsulation IP address of a remote switch connected to a remote remediation functionality; receiving at the local network device packets from the client during remediation; performing a lookup in the lookup table using information in the packets; if the information in the packets matches with the entry in the lookup table, determining whether the flag in the entry indicates the client needs remediation; if the flag in the entry indicates the client needs remediation, tunnel-encapsulating the packets; and forwarding the tunnel-encapsulated packets to the remote remediation functionality different from an original destination address of the packets and having membership in a remediation VLAN different from the original VLAN.