Cisco Technology, Inc.

Troy H Sherman

Ian Foo

Jason Frazier

Susan Marie Sauter

Kevin Roy McMenamy

Monica Dattatraya Joshi

Gregory Alan Moore

Bradley Neil Dunsmore

Salah Nassar

According to one embodiment, a method for removing authentication of a supplicant includes monitoring communication between the supplicant and an authenticator. The method also includes determining, based on the monitored communication, the MAC address for the supplicant and an attachment port of the supplicant to the intermediate network device disposed between the supplicant and the authenticator through which the monitored communication occurs. The method also includes determining that the supplicant no longer has a link connection with the intermediate network device, and in response, sending via the intermediate network device a logoff message having a spoofed source address of the supplicant to the authenticator.

Method and system for removing authentication of a supplicant

Systems and methods perform analysis of ICMP packets received at a network device port to determine if the ICMP packet is valid and thus should be forwarded. One aspect of the systems and methods includes configuring a port to be a trusted port in which any type of ICMP message may be considered valid. For untrusted ports, the system analyzes the ICMP packet to determine if the packet is one that should be received on an untrusted port. A further aspect of the systems and methods includes analyzing the ICMP packet data to determine if packet addresses have been spoofed or altered.

Systems and methods for access port ICMP analysis

Growing community of inventors

San Jose, MO, United States of America

Troy H Sherman