Software Defined Access Control Plane

The software defined access control plane is based on the Locator/ID Separation Protocol (LISP).

LISP is a IETF standard protocol defined in RFC 6830 that is based on simple endpoint ID (EID) to Routing Locator (RLOC) mapping system to separate the identity (endpoint IP address) from it’s current location (network edge or border router IP address)

Locator/ID Separation Protocol simplifies traditional routing environments by eliminating the need for each router to process every possible IP destination.

It moves remote destination routing information to a centralised mapping database called a LISP map server, known as a control plane node in software defined access.

It allows each router to manage it’s local routes and query the mapping system when it needs to locate a destination endpoint ID.

The LISP technology provides a smaller routing table for software defined access. LISP includes other advantages too such as providing dynamic host mobiltiy for both wired and wireless users, address-agnostic mapping and built-in network segmentation.