Abstract: A method and access node for preventing spoofing while connecting subscribers to an Ethernet network. The access node includes a filter mechanism for filtering packets destined to subscribers attached to the access node. The filter mechanism includes a database of allocated IP destination addresses and MAC addresses. The filter mechanism blocks any packet directed to a subscriber but containing an incorrect IP or MAC address. The mechanism prevents users from changing their address information to illegally appropriate packets from other users or to disguise their identity.

Abstract: A method and arrangement are proposed for controlling access by a client node to multicast traffic via an access network. When a client node sends a message to an access node of the access network requesting access to a multicast channel, the access node modifies this request by adding identification information to the message for identifying the client node before forwarding it to a router capable of routing multicast traffic streams. The router uses the identification information to consult access data stored for the client node and returns an acknowledgement message to the access node, indicating whether access is permitted. If access is granted, the access node streams the multicast channel to the client node. Modifying the multicast request message using the access node to include identification information allows the access control to be performed in a more centralized manner while retaining the security of a port-based access control.

Abstract: A method and arrangement are proposed for controlling access by a client node to multicast traffic via an access network. When a client node sends a message to an access node of the access network requesting access to a multicast channel, the access node modifies this request by adding identification information to the message for identifying the client node before forwarding it to a router capable of routing multicast traffic streams. The router uses the identification information to consult access data stored for the client node and returns an acknowledgement message to the access node, indicating whether access is permitted. If access is granted, the access node streams the multicast channel to the client node. Modifying the multicast request message using the access node to include identification information allows the access control to be performed in a more centralized manner while retaining the security of a port-based access control.

Abstract: A method and access node for preventing spoofing while connecting subscribers to an Ethernet network. The access node includes a filter mechanism for filtering packets destined to subscribers attached to the access node. The filter mechanism includes a database of allocated IP destination addresses and MAC addresses. The filter mechanism blocks any packet directed to a subscriber but containing an incorrect IP or MAC address. The mechanism prevents users from changing their address information to illegally appropriate packets from other users or to disguise their identity.

Abstract: The present invention relates to an access node for an access network. The access node is arranged to receive uplink data packets from a plurality of network devices. Each data packet comprises a source MAC address related to the network device being the source of the data packet. The access node is arranged to alter the source MAC address in the received uplink data packets to a fictive source MAC address common for at least a subset of said network devices. The present invention also relates to a method for controlling data packet traffic in an access node.