Understanding Roles in a Secure Network

The capacity to define roles is directly derived from the ability of the Extreme Networks S- K- and 7100-Series, stackable, and standalone devices to isolate packet flows by inspecting Layer 2, Layer 3, and Layer 4 packet fields while maintaining line rate. This capability allows for the granular application of a policy to a:

• Specific user (MAC, IP address or interface)
• Group of users (masked MAC or IP address)
• System (IP address)
• Service (such as TCP or UDP)
• Port (physical or application)

Because users, devices, and applications are all identifiable within a flow, a network administrator has the capacity to define and control network access and usage by the actual role the user or device plays in the network. The nature of the security challenge, application access, or amount of network resource required by a given attached user or device, is very much dependent upon the “role” that user or device plays in the enterprise. Defining and applying each role assures that network access and resource usage align with the security requirements, network capabilities, and legitimate user needs as defined by the network administrator.