Certificate-based dual authentication for openflow enabled switches

1. A computer implemented method for authenticating a networking appliance attempting to attach to a network, comprising:

receiving, by a computer attached to the network, a request from the networking appliance to attach to the network, wherein the request comprises a certificate signing request including credential data associated with the networking appliance and a certificate authority (CA) certificate associated with the computer, wherein receiving the request comprises initiating a NETCONF session, wherein the certificate signing request is encapsulated in a NETCONF message;

receiving, by the computer, a MAC address and a serial number associated with the networking appliance; and

authenticating, by the computer, the identity of the networking appliance based on both a) the MAC address and serial number associated with the networking appliance; and b) a uniquely generated client certificate which is tied to the networking appliance.

2. The method of claim 1 , wherein the credential data comprises identity data encrypted using a private key associated with the networking appliance.

3. The method of claim 2 , wherein the credential data comprises a public key associated with the private key.

4. The method of claim 1 , comprising: attaching, by the computer, the networking appliance to the network when the identity of the networking appliance is authenticated.

5. The method of claim 1 , wherein receiving the request comprises: receiving the request during an OpenFlow session initiated by the networking appliance.

6. The method of claim 1 , wherein the networking appliance comprises a virtual switch.

7. The method of claim 6 , wherein the networking appliance comprises a first physical interface coupled with the network and a second physical interface coupled with a network-enable device.

8. The method of claim 1 , wherein the computer comprises a software-defined-networking controller.

9. A system for authenticating a networking appliance attempting to attach to a network, comprising:

a memory device storing executable instructions; and a processor in communication with the memory device, wherein executing the executable instructions by the processor causes the processor to:

receive a request from the networking appliance to attach to the network, wherein the request comprises a certificate signing request including credential data associated with the networking appliance and a certificate authority (CA) certificate associated with the computer, wherein receiving the request comprises initiating a NETCONF session, wherein the certificate signing request is encapsulated in a NETCONF message;

receive a MAC address and a serial number associated with the networking appliance; and

authenticate the identity of the networking appliance based on both a) the MAC address and the serial number associated with the networking appliance; and b) a uniquely generated client certificate which is tied to the networking appliance.

10. The system of claim 9 , wherein the credential data comprises identity data encrypted using a private key associated with the networking appliance.

11. The system of claim 10 , wherein the credential data comprises a public key associated with the private key.

12. The system of claim 9 , wherein executing the executable instructions by the processor causes the processor to: attach the networking appliance to the network when the identity of the networking appliance is authenticated.

13. The system of claim 9 , wherein receiving the request comprises: receiving the request during an OpenFlow session initiated by the networking appliance.

14. The system of claim 9 , wherein the networking appliance comprises a virtual switch.

15. The system of claim 14 , wherein the networking appliance comprises a first physical interface coupled with the network and a second physical interface coupled with a network-enable device.

16. The system of claim 9 , comprising a software-defined-networking controller.