Patent ID: 7724728

Claim:
A method for processing packets performed by a packet switching device, the method comprising: authenticating a user and configuring the packet switching device to process a plurality of packets from the user using one or more policies, with said operations of authenticating the user and configuring the packet switching device including: using an authentication server to determine that the user is authorized, and in response, receiving a non-network address user group identifier corresponding to said authenticated user from the authentication server; associating a source address of the user with said received non-network address user group identifier for use in identifying the non-network address user group identifier, by the packet switching device, for packets received from the user; and querying a policy server based on said received non-network address user group identifier, and in response, receiving said one or more policies associated with the non-network address user group identifier for use in determining how the packet switching device should process packets from the user; and subsequent to said operations of authenticating the user and configuring the packet switching device, for each particular packet of the plurality of packets: receiving said particular packet, with said particular packet including the source address and a second field; associating the non-network address user group identifier with said received particular packet based on the source address of said particular packet; identifying a second non-network address group identifier based on the second field of said received particular packet; performing a lookup operation, based on the non-network address user group identifier and the second non-network address group identifier without the source address nor the second field, on said received one or more policies to identify a packet processing action to be performed on said received particular packet; and processing, by the packet switching device, said received particular packet based on the packet processing action said identified.