公开(公告)号：US09825814B2

公开(公告)日：2017-11-21

申请号：US14809971

申请日：2015-07-27

Applicant: Cisco Technology, Inc.

Inventor： Joji Thomas Mekkattuparamban ,  Vijay Chander ,  Saurabh Jain ,  Van Lieu ,  Badhri Madabusi Vijayaraghavan ,  Praveen Jain ,  Munish Mehta ,  Michael R. Smith ,  Narender Enduri

IPC: H04L12/24 ,  H04L29/06 ,  H04L29/12

CPC classification number: H04L41/0893 ,  H04L41/0886 ,  H04L61/15 ,  H04L61/6022 ,  H04L63/101 ,  H04L63/104

Abstract: Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

公开(公告)号：US20160352576A1

公开(公告)日：2016-12-01

申请号：US14809971

申请日：2015-07-27

Applicant: Cisco Technology, Inc.

Inventor： Joji Thomas Mekkattuparamban ,  Vijay Chander ,  Saurabh Jain ,  Van Lieu ,  Badhri Madabusi Vijayaraghavan ,  Praveen Jain ,  Munish Mehta ,  Michael R. Smith ,  Narender Enduri

IPC: H04L12/24

CPC classification number: H04L41/0893 ,  H04L41/0886 ,  H04L61/15 ,  H04L61/6022 ,  H04L63/101 ,  H04L63/104

Abstract: Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

Abstract translation: 提供了系统，方法和计算机可读存储介质，用于动态设置端点的端点组。 当添加到网络时，端点可以被分配一个默认端点组。 例如，默认端点组可以是被认为是不可信组的基准端口/安全组。 然后可以基于一组组选择规则动态地为端点组分配端点组。 例如，组选择规则可以基于MAC地址或其他属性来识别端点组。 当终点被添加到网络中时，可以确定端点的MAC地址和/或其他属性，并用于分配端点组。 作为另一示例，可以基于流量或客户操作系统的数量来分配端点组。