Patent ID: 8102860

Claim:
A method of determining whether to grant to an electronic device access to a local area network associated with a second port network identifier, the method comprising: designating by a network device a virtual inspection network, wherein said virtual inspection network is associated with a first port network identifier; upon connection of said electronic device to a port connected to said network device, associating said electronic device with said virtual inspection network by providing said first port network identifier by said network device to packets sent from said port; accepting by said network device information from said electronic device; determining based on said information whether said electronic device satisfies a criteria for granting access to said local area network, while said electronic device is connected to said port; and upon determination that said electronic device satisfies said criteria, granting to said electronic device access to said local area network, by changing said first port network identifier associated with said inspection network to said second port network identifier associated with said local area network, thus associating said electronic device with said local area network.