Abstract: A resource reservation and admission control scheme uses pseudowires to reserve bandwidth over a layer-2 and/or layer-3 network. The pseudowires are associated with ports on different network processing devices. During a resource reservation and admission control session, the physical links used by the pseudowire are selected and reserved to more effectively allocate network bandwidth. The negotiated pseudowire is then used to transport content for a communication session over the network. In one example application, the resource reservation and admission control scheme is used during a Downstream External PHY Interface (DEPI) session for pseudowires established between a Modular Cable Modem Termination System (M-CMTS) Core and an Edge Quadrature Amplitude Modulation Interface (EQAM) device. However, the reservation protocol can be used in any application that needs to reserve bandwidth over an Internet Protocol (IP) network.

Abstract: A resource reservation and admission control scheme uses pseudowires to reserve bandwidth over a layer-2 and/or layer-3 network. The pseudowires are associated with ports on different network processing devices. During a resource reservation and admission control session, the physical links used by the pseudowire are selected and reserved to more effectively allocate network bandwidth. The negotiated pseudowire is then used to transport content for a communication session over the network. In one example application, the resource reservation and admission control scheme is used during a Downstream External PHY Interface (DEPI) session for pseudowires established between a Modular Cable Modem Termination System (M-CMTS) Core and an Edge Quadrature Amplitude Modulation Interface (EQAM) device. However, the reservation protocol can be used in any application that needs to reserve bandwidth over an Internet Protocol (IP) network.

Abstract: A firewall clustering system connects two or more firewalls between an internal network and an external network. The plurality of two or more firewalls are combined to supply high-availability and scaling of processing capacity. Firewalls maintain client-server state information. Flow controllers are connected to the firewalls and placed on both the internal “trusted” side and the external “untrusted” side of the firewalls. Flow controllers are placed on both sides of the firewalls to ensure that traffic for a given client-server session flows through the same firewall in both inbound and outbound directions. The firewalls perform filtering operations and/or network address translation (NAT) services. In both cases, the flow controllers supply high availability, scalability, and traffic distribution for the firewalls in the firewall cluster.

Abstract: A router clustering system connects two or more routers to a one or more distinct Internet Service Providers (ISPs) in a complete high-availability arrangement. Typically the two or more routers connect to a plurality of ISPs at a site so that an outage of one ISP does not affect connectivity and availability to the site. The router clustering system typically includes a plurality of clustering units for redundancy that avoids difficulties that arise with a single point of failure. For example two clustering units may be used in an active-passive high-availability configuration. A router cluster creator creates or configures a router cluster. To create a router cluster, an administrator assigns to the cluster a logical Internet protocol (IP) address IPgw and specifies routers that are members of the cluster.

Abstract: A VPN device clustering system connects two or more VPN devices on one side of a virtual private network to a similarly clustered system of two or more VPN devices on the other side of a virtual private network. The VPN device clustering system typically includes a plurality of clustering units for redundancy that avoids difficulties that arise with a single point of failure. For example two clustering units may be used in an active-passive high-availability configuration. A VPN device cluster creator creates or configures a VPN device cluster. To create a VPN device cluster, an administrator assigns to the cluster a logical Internet protocol (IP) address IPvpn and specifies VPN devices that are members of the cluster.