Abstract: Domain-wide unique node identifiers and domain-wide unique service identifiers are distributed within a MPLS domain using routing system LSAs. Nodes on the MPLS network compute shortest path trees for each destination and install unicast forwarding state based on the calculated trees. Nodes also install multicast connectivity between nodes advertising common interest in a common service identifier. Rather than distributing labels to be used in connection with unicast and multicast connectivity, the nodes deterministically calculate the labels. Any number of label contexts may be calculated. The labels may either be domain wide unique per unicast path or per multicast, or may be locally unique and deterministically calculated to provide forwarding context for the associated path. Multicast and unicast paths may be congruent, although this is not a requirement.

Abstract: A system for synchronizing a first network device and a second network device. The first network device comprises an interface configured to release over a communication link a first signal carrying a first data stream clocked by a first clock signal. The second network device comprises an interface configured to receive the first signal over the communication link. The second network device also comprises a clock extraction module configured to generate an extracted clock signal from the received first signal; and a data coding module configured to clock a second data stream with an output clock signal selected based on a speed of a locally generated clock signal relative to the first clock signal or the extracted clock signal, thereby to produce a second signal for transmission from the second network element to the first network element.

Abstract: A technique for end-to-end admission control of real-time packet flows is disclosed. In one embodiment, the technique may be realized as a method for end-to-end admission control of real-time packet flows in a network having a plurality of network elements. The method may include transmitting at least one probe packet from a first network element to a second network element via a network path, determining, at at least one intermediate network element on the network path, at least one flow rate associated with a plurality of packets, marking at least one predetermined bit in the at least one probe packet if the at least one flow rate is greater than a predetermined rate, and controlling an admission of additional packets into the network based at least in part on the marking of the at least one predetermined bit in the at least one probe packet.

Abstract: Routes may be installed across multiple link state protocol controlled Ethernet network areas by causing ABBs to leak I-SID information advertised by BEBs in a L1 network area into an L2 network area. ABBs will only leak I-SIDs for BEBs where it is the closest ABB for that BEB. Where another ABB on the L2 network also leaks the same I-SID into the L2 network area from another L1 network area, the I-SID is of multi-area interest. ABBs will advertise I-SIDs that are common to the L1 and L2 networks back into their respective L1 network. Within each L1 and L2 network area, forwarding state will be installed between network elements advertising common interest in an ISID, so that multi-area paths may be created to span the L1/L2/L1 network areas. The L1/L2/L1 network structure may recurse an arbitrary number of times.

Abstract: Mechanisms for operating a network element in an optical network are disclosed. A network element has a plurality of ports, each port including a respective receive input for receiving an optical signal from another network element and a respective transmit output for transmitting an optical signal to the other network element. Each port is configured with a respective fault detection mode of a plurality of fault detection modes.

Abstract: A resilient virtual Ethernet ring has nodes interconnected by working and protection paths. Each node has a set of VLAN IDs (VIDs) for tagging traffic entering the ring by identifying the ingress node and whether the traffic is on the working or protection path. MAC addresses are learned in one direction around the ring. A port aliasing module records in a forwarding table a port direction opposite to a learned port direction. Each node can also cross-connect working and protection paths. If a span fails, the two nodes immediately on either side of the failure are cross-connected to fold the ring. Working-path traffic is cross-connected onto the protection path at the first of the two nodes and is then cross-connected back onto the working path at the second of the two nodes so that traffic always ingresses and egresses the ring from the working path.

Abstract: A technique for enabling a plurality of software components to communicate in a software component matrix environment is disclosed. In one particular exemplary embodiment, the technique may be realized by a method for enabling a plurality of software components to communicate in a software component matrix environment comprising the steps of encoding a request at a client side; communicating the request to a server at a server side via a communication interface; comparing the request to a plurality of operations supported at the server side; determining whether a function match exists at the server side; and returning a response comprising the function match to the client side in response to the request via the communication interface wherein the response is mapped to a data model of a client.

Abstract: A network includes an edge node configured to define per hop behaviors using a set of bits in an Ethernet header of a frame and a core node configured to receive the frame and to forward the frame according to the per-hop-behaviors. The network can also include a defined set of differentiated service classes, each differentiated service class associated with the set of per hop behaviors, indicated in the set of priority bits. The network classifies the Ethernet frame based on at least one of a set of priority bits or information in at least one protocol layer in the frame header of the Ethernet frame and determines a per hop behavior based on the classification.

Abstract: Numerous enhancements to metro Ethernet network (MEN) E-LAN services and IETF Virtual Private LAN Service (VPLS) include an enhancement of the overall Quality of Service (QoS) architecture, an enhancement to classification at the provider edge, the use of Ethernet QoS classes, enhancements to policing and marking at ingress provider edge equipment, the provision of traffic management functions at egress provider edge equipment, the use of multiple Ethernet virtual connections (EVCs) and Aggregate EVCs, an enhancement to QoS across an external network-network interface and an enhancement to treatment of Ethernet service frames in a core network.

Abstract: IP Multinetting on a local area network is simulated by performing VLAN translation at a port connecting to the local area network. This allows IP addresses from multiple subnets to be associated with a single VLAN on the Local Area Network (LAN), while allowing the core switch to process the packets with a one-to-one correspondence between IP Subnet and VLAN. When a packet is received from the local area network at an IP multinetting port, the VLAN ID will be read to determine if the packet contains the IP Multinetting VLAN ID. The IP Subnet address will also be checked to see if the packet is associated with an IP Subnet that is part of the Multinetting. If so, the multinetting VLAN ID will be changed to an IP Subnet specific VLAN ID before the packet is processed by the core switch.

Abstract: A source conference function is provided for each source device, and a destination conference function is provided for each destination device. Any given user terminal may act as both a destination device when receiving media content and a source device when sending media content to facilitate bidirectional conferencing. The source device generates media content, which is sent to the associated source conference function. In general, the source conference function identifies destination conference functions to which the media content should be delivered, and delivers the media content to the identified destination conference functions. Any given destination conference function receives the media content from this and other source conference functions. The media content received from all or select of the source conference functions may be processed by the destination conference function as desired, and then mixed together to form destination media content, which is delivered to the destination device.

Abstract: A primary optical path in an optical network is established between first and second edge nodes of the optical network for communication between the first edge node and a primary customer network site coupled to the second edge node. A backup optical path through the optical network from the first edge node to a third edge node of the optical network other than the second edge node is determined for communication between the first edge node and a backup customer network site coupled to the third edge node of the optical network. The backup customer network site is designated to back up the primary customer network site. Communications are forwarded on the primary optical path from the first edge node toward the primary customer network site via the second edge node. Upon detection of a degradation or failure of the primary customer network site, communications are forwarded on the backup optical path from the first edge node toward the backup customer network site via the third edge node.

Abstract: A technique for implementing an optical virtual private network is disclosed. In one particular exemplary embodiment, the technique may be realized by a method comprising the steps of managing at least one client edge-virtual private network at a client edge by a service provider; and supporting a set of client edge-users at each client edge-virtual private network at each client edge wherein each client edge provides at least one virtual private network service to each client edge-user; wherein each client edge determines connectivity associated with each client edge-user and the service provider establishes the connectivity determined by each client edge.

Abstract: In a hitless manual cryptographic key refresh scheme, a state machine is independently maintained at each network node. The state machine includes a first state, a second state, and a third state. In the first state, which is the steady state, a current cryptographic key is used both for generating signatures for outgoing packets and for authenticating signatures of incoming packets. In the second state, which is entered when a new cryptographic key is provisioned, the old (i.e. formerly current) key is still used for generating signatures for outgoing packets, however one or, if necessary, both of the old key and the newly provisioned key is used for authenticating signatures of incoming packets. In the third state, the new key is used for generating signatures for outgoing packets and either one or both of the old key and new key are used for authenticating signatures of incoming packets.

Abstract: A method and apparatus for quickly determining the status of a network device in a network communicates status inquiry messages over the forwarding plane of one network device to at least one neighboring network device. The status inquiry messages indicate the connectivity status with at least one neighboring network device.

Abstract: A method, apparatus, and communication network system that allows an endpoint to be simultaneously registered with more than one communications server is described. In one embodiment, the communication network system includes a network, a plurality of communications servers that are coupled to the network, and a plurality of endpoints coupled to the network. Each endpoint is capable of being simultaneously registered with more than one communications server. A communication method for an endpoint involves registering a first logical line of the endpoint with a first communications server, and registering a second logical line of the endpoint with a second communications server. Consequently, flexibility is obtained by allowing an endpoint to choose the registering communications server for each logical line of the endpoint.

Abstract: In a click-to-call communication environment, the present invention is employed to select an appropriate call server to use when establishing a call between two endpoints. A computing terminal provides a request to initiate a call between the two endpoints. The request is passed to a service node directly or through any number of intermediate nodes, such as a web server. The request may identify a source and a destination for the call. The service node will select a call server to use for establishing the call between the two endpoints based on the destination for the call, and send instructions to the call server to initiate the call. In response, the call server will initiate the call between the two endpoints.

Abstract: A modular optical switch includes a set of optical switch modules connected in a mesh, a master controller for the whole optical node and a switch-module controller for each of the optical switch modules. The optical switch modules receive optical signals from, and transmit optical signals to, edge nodes based on connection requests received from the edge nodes. The master controller acts to select a path, using a simple or compound time-slot matching process, through the mesh of switch modules for each optical signal related to a connection request. Advantageously, the optical switch modules are fast switching, enabling the use of time-sharing schemes such as TDM, and the modular optical core node is made practical by efficient path selection at the master controller. A hybrid modular switch may include both optical and electronic switch modules, a master controller, and a switch-module controller for each of the switch modules.

Abstract: In a network device such as a network switch having a port coupled to a communications medium dedicated to a single virtual local area network and another port coupled to a communications medium shared among multiple virtual local area networks for transmitting data frames between the dedicated communications medium and the shared communications medium, a method of identifying the virtual network associated with each data frame received by the network switch when transmitting the data frames over the shared communications medium. The method comprises receiving data frames from the dedicated communications medium coupled to one port, and, with respect to each data frame so received, inserting a new type field and a virtual network identifier field. The contents of the new type field indicate the data frame comprises a virtual network identifier field.

Abstract: In a network device such as a network switch having a port coupled to a communications medium dedicated to a single virtual local area network and another port coupled to a communications medium shared among multiple virtual local area networks for transmitting data frames between the dedicated communications medium and the shared communications medium, a method of identifying the virtual network associated with each data frame received by the network switch when transmitting the data frames over the shared communications medium. The method comprises receiving data frames from the dedicated communications medium coupled to one port, and, with respect to each data frame so received, inserting a new type field and a virtual network identifier field. The contents of the new type field indicate the data frame comprises a virtual network identifier field.