Patent ID: 8584209

Claim:
A network node comprising: a processor to: receive, from a client device, an access request via a first port that drops traffic that is not associated with an authentication operation, the access request being received using a layer-two authentication protocol, the access request including information associated with the client device, transmit, to another network node and based on the access request, an authentication request via a second port, the authentication request including the information associated with the client device, the authentication request being transmitted using a layer-two tunnel, the other network node communicating with an authentication server, using a layer-three authentication protocol, to authenticate the client device based on the information associated with the client device, receive, from the other network node and via the second port, a request for challenge information based on transmitting the authentication request, the request for challenge information being received via the layer-two tunnel, the request for challenge information being received by the other network node from the authentication server, transmit, to the client device and via the first port, the request for challenge information using the layer-two authentication protocol, receive, from the client device and using the layer-two authentication protocol, a response to the request for challenge information, transmit, to the other network node and via the layer-two tunnel, the response, receive, from the other network node and via the second port, a notification that the client device is authenticated, the notification being received using the layer-two tunnel based on transmitting the response, and establish an authentication session with the client device based on the notification, when establishing the authentication session, the processor is to set the first port to an authorized state that enables the network node to process traffic that is not associated with the authentication operation.