Patent ID: 8341717

Claim:
A dynamic network policies system based on device classification, comprising: an at least one computer system; a configuration database; and a dynamic network policies application based on device classification that, when executed on the at least one computer system, receives a message from a virtual local area network access component containing a device identity certificate in response to a device seeking access to services on a network, wherein the device identity certificate comprises the device classification, parses the device identity certificate to discover the device classification, references the configuration database based on the device classification to determine a network policy of a plurality of network policies associated with the device classification, wherein each of the plurality of network policies is associated with a different device classification, and wherein each of the plurality of network policies groups network services for the corresponding device classification, associates the network policy with a virtual local area network definition, and sends a reply containing the virtual local area network definition to the virtual local area network access component in response to the request, wherein access to at least some of the services on the network is made available by association with a virtual local area network, and wherein association with the virtual local area network is specific to the device classification and the network policy.