1. A method for declarative network access control, comprising: receiving at least one sentence from at least one customer in a declarative access control language, wherein the at least one sentence comprises at least one client, an authentication result, at least one condition, and an action; interpreting the at least one sentence to generate at least one rule; evaluating the at least one rule to generate at least one consequence; and providing access control to at least one network based on the at least one consequence.