Abstract: Systems, methods, and computer-readable media are described for auto-configuring a network communication port such as an Ethernet port to which a network device is connected in a manner that eliminates or otherwise dramatically mitigates the manual effort required for port configuration, while at the same time, ensuring that network security is maintained by authenticating the device during the auto-configuration process. Various auto-configuration processes are described that include varying levels of verification processing to ensure that the network device connected to the port to be configured is a device that is authorized to connect to the network. In this manner, the threat of device spoofing is eliminated or otherwise substantially reduced. Auto-configuration of network ports in connection with switching a known network device to a new port or connecting a previously unknown network device to a network port are described.

Abstract: Systems, methods, and computer-readable media are described for auto-configuring a network communication port such as an Ethernet port to which a network device is connected in a manner that eliminates or otherwise dramatically mitigates the manual effort required for port configuration, while at the same time, ensuring that network security is maintained by authenticating the device during the auto-configuration process. Various auto-configuration processes are described that include varying levels of verification processing to ensure that the network device connected to the port to be configured is a device that is authorized to connect to the network. In this manner, the threat of device spoofing is eliminated or otherwise substantially reduced. Auto-configuration of network ports in connection with switching a known network device to a new port or connecting a previously unknown network device to a network port are described.

Abstract: Systems, methods, and computer-readable media are described for auto-configuring a network communication port such as an Ethernet port to which a network device is connected in a manner that eliminates or otherwise dramatically mitigates the manual effort required for port configuration, while at the same time, ensuring that network security is maintained by authenticating the device during the auto-configuration process. Various auto-configuration processes are described that include varying levels of verification processing to ensure that the network device connected to the port to be configured is a device that is authorized to connect to the network. In this manner, the threat of device spoofing is eliminated or otherwise substantially reduced. Auto-configuration of network ports in connection with switching a known network device to a new port or connecting a previously unknown network device to a network port are described.

Abstract: To enable devices to detect L3 roaming users and to take appropriate forwarding actions, L3 knowledge is introduced inside a bridge in a non-intrusive way. In particular, as a client moves from a subnet associated with a first network element to a subnet associated with a second network element, a determination is made regarding whether the client is roaming. This is done by evaluating a source IP address within a L3 packet header within a first frame received at the second network element. If, as a result of the evaluating step, it is determined that the client is roaming, an L2 bridge forwarding table in the second network element is configured to include a source MAC address of the client together with information identifying at least a destination interface for use in directing client data traffic back towards the subnet associated with the first network element. The first frame is then forwarded.