Patent ID: 8094663

Claim:
A processor-implemented method of operation for a Broadband Remote Access Server (BRAS) device of an Ethernet access network, the method comprising: receiving an Extensible Authentication Protocol (EAP) message transported from a subscriber-premises device in compliance with an IEEE 802.1x compatible protocol; allowing or denying the subscriber-premises device access to the Ethernet access network on a per service basis based on a logical identifier contained in the EAP message, a first application layer service being allowed without passing of authentication credentials, a second application layer service being allowed only after authentication, the first and second application layer services comprising end-user Layer 2 (L2) and/or Layer 3 (L3) services, the authentication comprising: encapsulating subscriber identity information extracted from the EAP message in a Remote Authentication Dial-In User Service (RADIUS) authentication access request; and forwarding the RADIUS authentication access request to the RADIUS server for validation.