Abstract: Methods and devices are provided for implementing a dual mode firewall. Some implementations provide a firewall in a network device that acts as a bridge for layer 2 traffic and acts as a router for layer 3 traffic. In some implementations, a determination of whether to act as a bridge or a router for a packet is based on the configuration of the interface handling the packet. In some implementations, the network device inspects a destination of each packet to determine whether to act as a bridge or a router for that packet. The firewall screens both the layer 2 and the layer 3 traffic according to policies implemented in the firewall.

Abstract: A method and system for emulating an Fibre Channel link over a SONET transport path to provide link integrity is disclosed. Techniques to handle link failures from a Fibre Channel element to its associated Fibre Channel port, or of the SONET/SDH network linking Fibre Channel ports are described. Timing the length of failures and return of operation of the failed links is used to handle transient conditions and to avoid link bouncing.

Abstract: Methods and apparatus for authenticating a mobile node are disclosed. A server is configured to provide a plurality of security associations associated with a plurality of mobile nodes. A packet identifying a mobile node may then be sent to the server from a network device such as a Home Agent. A security association for the mobile node identified in the packet may then be obtained from the server. The security association may be sent to the network device to permit authentication of the mobile node. Alternatively, authentication of the mobile node may be performed at the server by applying the security association.

Abstract: Methods and apparatus for processing registration requests by a Home Agent supporting Mobile IP are disclosed. A registration request is received from each of a plurality of Mobile Nodes, the registration request specifying a care-of address, which may be allocated by the Foreign Agent. A binding is established between each of the plurality of Mobile Nodes and the associated care-of address, each of the plurality of Mobile Nodes being associated with one another. For instance, the plurality of Mobile Nodes may be statically or dynamically assigned the same Home Address. A tunnel is then created between the Home Agent and the care-of address for each of the plurality of Mobile Nodes, thereby enabling a server request to be distributed by the Home Agent to one of the plurality of Mobile Nodes or to a cluster of Mobile Nodes (e.g., associated with the care-of address) via the associated tunnel.