METHOD AND APPARATUS FOR INGRESS FILTERING USING SECURITY GROUP INFORMATION

• US 20110271102A1
• Filed: 11/01/2010
• Published: 11/03/2011
• Est. Priority Date: 12/01/2004
• Status: Active Grant

• Current Assignee: Michael D. Smith
• Original Assignee: Michael D. Smith
• Inventors: Smith, Michael R.
• Granted Patent: US 8,301,882 B2
• Time in Patent Office: Days
• US Class Current: 713/160
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method and apparatus for ingress filtering using security group information are disclosed. The method includes performing access control processing on a packet and sending access control information to an ingress node of the packet in response to the access control processing. The access control information includes security group information and an address of a network node. The security group information identifies a security group. The network node is a member of the security group and is a destination of the packet.

Claims

1. A method comprising:

performing access control processing on a packet; and

sending access control information to an ingress node of said packet in response to said access control processing, wherein

said access control information comprises

security group information, and

an address of a network node,

said security group information identifies a security group,

said network node is a member of said security group, and

said network node is a destination of said packet.