Patent ID: 8713087

Claim:
A control server, wherein said control server is connected to: a forwarding node that executes processing a packet between a supplicant and a prescribed authentication device, in accordance with a set processing rule, and an authentication device that performs a prescribed authentication procedure with said supplicant via said forwarding node, and gives notification of a result thereof to a control server; wherein said control server creates a first forwarding path between said supplicant and a destination node, in a case where an authentication procedure with said authentication device succeeds, and sets a processing rule for a packet received or transmitted between said supplicant and destination node following said first forwarding path, in at least one forwarding node in said first forwarding path, wherein said control server creates a second forwarding path between said supplicant and said prescribed authentication device, in a case where a packet for which a processing rule is unknown, transmitted from said forwarding node, includes information that the packet comprises an authentication packet, and with regard to at least a forwarding node that is a source of said forwarded packet, thereafter transmits a processing rule to be applied by said forwarding node to an authentication packet received or transmitted between a supplicant and a prescribed authentication device.