Abstract: An apparatus and method for performing automated testing and trouble isolation of a communications link in an access network is described. Communications link testing may occur without taking the communications link out of service for the duration of the test.

Abstract: A system and method are provided for providing access communications between customer locations and a core network service edge. Access flows are handled as carrier-tagged flows through a packet switched network comprising network elements that interpret and manipulate carrier tag values associated with traffic-bearing data frames. In accordance with a preferred embodiment, a discard eligibility indication may be provided with the data frames.

Abstract: A network architecture includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: In one embodiment, a network system of the present invention includes at least a first router and a second router coupled to an upstream link to permit data flow from the first router to the second router across the upstream link. The second router includes a control plane and a data plane having an input port coupled to the upstream link and an output port connectable to a downstream link. The control plane includes a virtual pool having a capacity corresponding to a resource capacity of the first router and an admission control function. In response to a request to reserve resources for a flow through the data plane from the input port to the output port, the admission control function performs admission control for the upstream link by reference to resource availability within the virtual pool.

Abstract: A data network may include an upstream router having one or more data handling queues, a downstream router, and a policy server. In one embodiment, the policy server includes processing resources, a communication interface in communication with the processing resources, and data storage that stores a configuration manager executable by the processing resources. The configuration manager configures data handling queues of the upstream router to provide a selected bandwidth to one or more of a plurality of service classes of data flows. In addition, the configuration manager transmits to the downstream router one or more virtual pool capacities, each corresponding to a bandwidth at the upstream router for one or more associated service classes among the plurality of service classes.

Abstract: A network architecture includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: A network architecture includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: A network architecture includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: A network architecture in accordance with the present invention includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: In one embodiment, a network system of the present invention includes at least a first router and a second router coupled to an upstream link to permit data flow from the first router to the second router across the upstream link. The second router includes a control plane and a data plane having an input port coupled to the upstream link and an output port connectable to a downstream link. The control plane includes a virtual pool having a capacity corresponding to a resource capacity of the first router and an admission control function. In response to a request to reserve resources for a flow through the data plane from the input port to the output port, the admission control function performs admission control for the upstream link by reference to resource availability within the virtual pool.

Abstract: A data network may include an upstream router having one or more data handling queues, a downstream router, and a policy server. In one embodiment, the policy server includes processing resources, a communication interface in communication with the processing resources, and data storage that stores a configuration manager executable by the processing resources. The configuration manager configures data handling queues of the upstream router to provide a selected bandwidth to one or more of a plurality of service classes of data flows. In addition, the configuration manager transmits to the downstream router one or more virtual pool capacities, each corresponding to a bandwidth at the upstream router for one or more associated service classes among the plurality of service classes.

Abstract: In one embodiment of the invention, a network system includes a boundary router, a second router, and an upstream link of the second router coupled between to the output port of the boundary router and an input port of the second router. The second router includes an admission control function and a data plane. In response to a request to reserve resources for a flow through the second router, the admission control function performs admission control for both the upstream link and its downstream link. In a preferred embodiment, the second router performs admission control for the upstream link only if the second router is a receiving edge router for the flow. Because the second router performs admission control for its upstream link, the boundary router transmits the request toward an upstream router without performing admission control for the link.

Abstract: A method and system for resilient internetwork connection of frame relay (FR) networks and/or end systems. For FR relay networks interconnected by a self-healing network, a standard protocol is provided which allows a resilient network-to-network interface NNI to automatically respond to physical interfaces failures detected by the self-healing network. Switching gateways in the resilient NNI, re-route further traffic to avoid the failed physical interface. In one embodiment, a simple set of interacting protocols and mechanisms control communication between FR/ATM gateways and ATM switches. Each FR/ATM gateway includes interworking function (IWF) processing modules for converting user data between frame relay packets and ATM cells and for processing status signaling messages to achieve a resilient NNI.

Abstract: A network architecture and service platform for providing virtual private network services ("VPN") over an ATM network. The architecture provides services for voice, video, and data traffic among multiple VPN customers over a shared ATM network by implementing intelligent control devices to perform enhanced processing of ATM call setup messages, including validations and routing translations. Hierarchical routing mechanisms provided by ATM, along with customized customer addressing schemes, are used to overlay customer VPNs as higher-level networks onto the shared ATM network. The control devices translate customer ATM VPN address to internal ATM network addresses. The ATM switch network then performs lower-level network processing, using internal network addressing, to setup a virtual connection for a VPN call. The intelligent control devices may also explicitly state the end-to-end route.

Abstract: To perform call control signaling between a user and a telecommunications switching network (and end-to-end between users), a portion of the multiplex overhead of a multiplexed data stream is formatted so that it includes the call control signaling. This in-band signaling is actually in the multiplex overhead and not in the user data as in standard multiplex formats. At nodes of the network and at user devices connected to the network, the call control signaling is extracted from the overall data stream and is processed to selectively generate new and responsive call control signaling for completing the signaling operations. The invention is useful over the entire multiplex hierarchy.