Patent ID: 8688836

Claim:
A method performed in a network element for limiting resources consumed by rejected subscriber end stations, wherein the network element is coupled between a subscriber end station and an authentication, authorization, and accounting (AAA) server, the method comprising the steps of: receiving from the subscriber end station a subscriber session-request message including at least information for verifying identity; transmitting to the AAA server an AAA access-request message corresponding to the subscriber session-request message; receiving from the AAA server an AAA access-reject message corresponding to the AAA access-request message and including a status suggesting at least a temporary suppression of any additional AAA access-request messages associated with the subscriber end station; and receiving an AAA change of authorization message, associated with the subscriber end station, from the AAA server that indicates a status suggesting that the at least temporary suppression should end; causing, during the at least temporary suppression, any additional AAA access-request messages associated with the subscriber end station to be dropped based on a media access control address associated with the subscriber end station; receiving one or more additional session-request messages associated with the subscriber end station during the at least temporary suppression; dropping the one or more additional session-request messages without transmitting any corresponding AAA access-request messages pursuant to the at least temporary suppression; transmitting, responsive to the step of receiving from the AAA server the AAA access-reject message, an operations, administration, maintenance, and provisioning (OMAP) message toward the subscriber end station to cause the at least temporary suppression in an access network coupled between the subscriber end station and the network element; transmitting, responsive to the AAA change of authorization message, an operations, administration, maintenance, and provisioning (OMAP) message toward the subscriber end station to cause the at least temporary suppression in the access network to end.