NETWORK ADDRESS ALLOCATION USING A USER IDENTITY

1 . An apparatus comprising:

memory to store one or more permanent network addresses assigned to a user identity; and

one or more processors to execute an allocation module, the allocation module configured to:

generate an identifier associated with the user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address;

send the identifier associated with the user identity to the node; and

allocate at least one permanent network address of the one or more permanent network addresses to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node.

2 . The apparatus of claim 1 , wherein the allocation module is configured to:

receive a release request from the node to release the temporary network address.

3 . The apparatus of claim 1 , wherein the allocation module is configured to:

assign the at least one permanent network address to another node responsive to detecting that a user associated with the user identity moves from the node and logs on to the other node.

4 . The apparatus of claim 1 , wherein the allocation module is configured to:

assign the one or more permanent network addresses to the user identity responsive to receiving an indication that a user account associated with the user identity has been created.

5 . The apparatus of claim 1 , wherein the allocation module is configured to:

select the one or more permanent network addresses from a plurality of network addresses associated with a same subnet of the network.

6 . The apparatus of claim 1 , wherein the one or more permanent network addresses comprise a first permanent network address and a second permanent network address, and wherein the allocation module is configured to:

select an address associated with a first subnet of the network as the first permanent network address, and an address associated with a second subnet of the network as the second permanent network address.

7 . The apparatus of claim 1 , wherein the allocation module is configured to:

generate the identifier responsive to receiving an indication that the user identity has been authenticated.

8 . The apparatus of claim 1 , wherein the identifier comprises a random identifier, wherein the allocating module is configured to:

select a different random identifier for each permanent network address request.

9 . The apparatus of claim 1 , wherein the apparatus comprises a Dynamic Host Configuration Protocol (DHCP) server.

10 . The apparatus of claim 1 , wherein the apparatus comprises a directory service server.

11 . A method comprising:

generating, using one or more processors, an identifier associated with a user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address;

sending the identifier associated with the user identity to the node; and

allocating at least one permanent network address to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node, the at least one permanent network address selected from one or more permanent network addresses previously assigned to the user identity.

12 . The method of claim 11 , wherein the detecting comprises:

authenticating the user identity.

13 . The method of claim 12 , wherein the authenticating comprises:

determining that log-in credentials received from the node are associated with the user identity.

14 . The method of claim 11 , further comprising:

assigning the one or more permanent network addresses to the user identity responsive to identifying that a user account associated with the user identity has been created by a directory service.

15 . The method of claim 11 , further comprising:

receiving an address mapping list, including the one or more permanent network addresses, from a directory service.

16 . The method of claim 15 , further comprising:

transmitting a request for the address mapping list to the directory service, the request including the identifier.

17 . The method of claim 11 , wherein the allocating of the at least one permanent network address comprises:

receiving a release request from the node to release the temporary network address.

18 . The method of claim 11 , wherein the allocating of the at least one permanent network address comprises:

refraining from allocating the at least one permanent network address to the node responsive to determining that a subnet address of the at least one permanent network address does not match a subnet of the network accessed by the node.

19 . The method of claim 11 , wherein the node comprises one of a physical machine or a virtual machine.

20 . A non-transitory computer-readable storage device storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

generating an identifier associated with a user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address;

sending the identifier associated with the user identity to the node; and

allocating at least one permanent network address to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node, the at least one permanent network address selected from one or more permanent network addresses previously assigned to the user identity.