CLASSIFICATION OF WIRED TRAFFIC BASED ON VLAN
Controlling access and capabilities on wired digital networks. According to the invention, rather than use port-centric controls, multiple virtual local area networks (VLANs) are supported by a wired controller, and these VLANS may be terminated on multiple physical ports. Capabilities are then assigned on a VLAN basis, with default capabilities assigned to the port when no VLAN is used. By defining capabilities on a VLAN basis, as an example no access, trusted access, or untrusted access. Trusted access VLANS are not subject to authentication or firewalling. Untrusted VLANS are subject to authentication and firewalling, which may be configured as required for the VLAN and its authorized users.
1 . A method of controlling port traffic on a wired local area network controller having a plurality of ports comprising;
providing one or more virtual local area networks associated with one or more of the ports,
associating capabilities with the one or more virtual local area networks, and
authenticating and/or firewalling traffic on the virtual local area networks associated with the ports based on the capabilities associated with the virtual local area network.
2 . The method of claim 1 further comprising associating a default capability with port traffic not associated with a virtual local area network.
3 . The method of claim 1 where the capability associated with a virtual local area network is trusted access whereby port traffic on a trusted access virtual local area network is neither authenticated nor firewalled.
4 . The method of claim 1 where the capability associated with a virtual local area network is untrusted access whereby port traffic on an untrusted access virtual local area network is authenticated and/or firewalled.
5 . The method of claim 2 where the default capability associated with port traffic not associated with a virtual local area network is no access whereby port traffic not associated with a virtual local area network is blocked.
6 . The method of claim 2 where the default capability with port traffic not associated with a virtual local area network is trusted access whereby port traffic not associated with a virtual local area network is neither authenticated nor firewalled.
7 . The method of claim 2 where the default capability with port traffic not associated with a virtual local area network is untrusted access whereby port traffic not associated with a virtual local area network is authenticated and/or firewalled.