11. A method for declarative network access control, comprising: receiving a sentence from a network administrator in a declarative programming language in which relationships between variables are defined in terms of functions or interference rules, wherein the sentence comprises at least one client, an authentication result, at least one condition, and an action; interpreting the sentence to generate at least one rule regarding access to a network; and providing or denying access to said network based on the generated at least one rule.
15. The method of claim 11 , wherein the generated at least one rule further specifies a network access policy governing network access granted under the generated at least one rule.