PROBLEM TO BE SOLVED: To flexibly change an authentication switch that passes an authentication packet in an authentication network.SOLUTION: An authentication switch 200 comprises: authentication server processing means 220 for periodically performing communication with an authentication server 100 for a health check; a reception port filter 250 that defines performance that determines whether or not an authentication packet from a client terminal 300 is passed; and a packet input filter 270 that defines performance that determines whether or not communication to an external network of the client terminal 300 is passed. The authentication server 100 comprises: switch monitoring means 132 for periodically performing communication with the authentication switch 200 for a health check; and filter generation and notification means 131 for determining an authentication switch 200 which an authentication packet of the client terminal 300 passes on the basis of the result of the health check, and generating the rec
