DEVICE IDENTIFICATION AND POLICY ENFORCEMENT USING POWER OVER ETHERNET (POE)
Systems, methods, and related technologies for device identification and policy enforcement using Power over Ethernet (PoE) are described. In certain aspects, receiving a communication that originates from a Power over Ethernet (PoE) enabled device is received, wherein the PoE enabled device receives electrical power from an Ethernet port. The communication is processed to determine identifying information of the PoE enabled device from which the communication originates and a network access policy enforcement action is initiated based on the identifying information of the PoE enabled device.
1 . A method comprising:
receiving a communication that originates from a Power over Ethernet (PoE) enabled device, wherein the PoE enabled device receives electrical power from an Ethernet port;
processing, by a processing device, the communication to determine identifying information of the PoE enabled device from which the communication originates; and
initiating a network access policy enforcement action based on the identifying information of the PoE enabled device.
2 . The method of claim 1 , wherein the identifying information comprises a device type of the PoE enabled device and an indication of an amount of power to be consumed by the device.
3 . The method of claim 2 , wherein initiating the action comprises initiating the action based on the amount of power to be consumed by the PoE enabled device.
4 . The method of claim 2 , wherein initiating the action comprises initiating the action based on the device type of the PoE enabled device.
5 . The method of claim 1 , wherein the communication comprises a Simple Network Management Protocol (SNMP) communication.
6 . The method of claim 1 , wherein processing the communication comprises:
identifying an expected power consumption of the PoE enabled device from the communication; and
determining a deviation from the expected power consumption associated with the PoE enabled device.
7 . The method of claim 6 , wherein initiating the network access policy enforcement action comprises initiating the action based on the deviation from expected power consumption associated with the PoE enabled device.
8 . The method of claim 1 , wherein initiating the action comprises blocking power transmission directed to the PoE enabled device via a network connection.
9 . A system comprising:
a memory; and
a processing device, operatively coupled to the memory, to:
receive a communication that originates from a Power over Ethernet (PoE) enabled device, wherein the PoE enabled device receives electrical power from an Ethernet port;
process the communication to determine identifying information of the PoE enabled device from which the communication originates; and
initiate a network access policy enforcement action based on the identifying information of the PoE enabled device.
10 . The system of claim 9 , wherein the identifying information comprises a device type of the PoE enabled device and an indication of an amount of power to be consumed by the device.
11 . The system of claim 10 , wherein initiating the action comprises initiating the action based on the amount of power to be consumed by the PoE enabled device.
12 . The system of claim 10 , wherein initiating the action comprises initiating the action based on the device type of the PoE enabled device.
13 . The system of claim 9 , wherein the communication comprises a Simple Network Management Protocol (SNMP) communication.
14 . The system of claim 9 , wherein processing the communication comprises:
identifying an expected power consumption of the PoE enabled device from the communication; and
determining a deviation from the expected power consumption associated with the PoE enabled device.
15 . The system of claim 14 , wherein initiating the network access policy enforcement action comprises initiating the action based on the deviation from expected power consumption associated with the PoE enabled device.
16 . The system of claim 9 , wherein initiating the action comprises blocking power transmission directed to the PoE enabled device via a network connection.
17 . A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
receive a communication that originates from a Power over Ethernet (PoE) enabled device, wherein the PoE enabled device receives electrical power from an Ethernet port;
process, by the processing device, the communication to determine identifying information of the PoE enabled device from which the communication originates; and
initiate a network access policy enforcement action based on the identifying information of the PoE enabled device.
18 . The non-transitory computer readable medium of claim 17 , wherein the identifying information comprises a device type of the PoE enabled device and an indication of an amount of power to be consumed by the device.
19 . The non-transitory computer readable medium of claim 18 , wherein initiating the action comprises initiating the action based on the device type of the PoE enabled device.
20 . The non-transitory computer readable medium of claim 17 , wherein the communication comprises a Simple Network Management Protocol (SNMP) communication.