Abstract: A system and method for steering traffic through a set of services is provided. A service path or service chain is assigned to a received packet based on a classification of the packet and correlation of the packet with a traffic flow. A new service chain identifier can be created if no such correlation exists. A next service type and a particular instance of the next service type can be determined in accordance with the service chain identifier. A next destination for the traffic can be set in accordance with the instance of the next service.

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract: Methods and systems for distributing multicast signals carried by an incoming light wave are disclosed. According to one aspect, the invention provides a method of controlling an optical device. The method includes dynamically controlling a plurality of optical attenuators of the optical device based on control signals indicative of changes to a multicast group.

Abstract: A method for providing a parser by a network node, which includes a table defining a plurality of rules and a plurality of match fields required for extraction from an incoming data packet header in order to apply each of the respective rules is described. The method comprises determining at least one occurrence in the table of a first match field that requires extraction; and determining a parser for use in accordance with the at least one determined occurrence of the first match field. Furthermore, the step of determining at least one occurrence of the first match field comprises initializing a counter associated with the first match field and incrementing the counter for each of the plurality of rules that requires extraction of the first match field. And the step of determining a parser comprises determining the parser for use in accordance with the counter. A network node for carrying this method is also described.

Abstract: In one aspect, the teachings herein provide point-to-point communication between all the virtual machines (VMs) belonging to the same tenant in a cloud-based virtual network environment without using any intermediate routing functions, and while providing full virtualization at the L2 and L3 levels. That is, the approach preserves completely isolated address spaces for each tenant at both L2 and L3 levels and supports multiple subnets for each tenant, and thereby allows tenants to define their own virtual networks without requiring the addition of expensive centralized routing and without requiring inter-subnet communications for the same tenant to traverse sub-optimal paths, as happens with software-based routers implemented in one of the VMs belonging to the tenant.

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract: Systems and methods are described which delegate reachability testing for mobility signaling in communication networks. A mobile node transmits a mobility signaling package to other network nodes, which can use the information contained therein to perform the delegated reachability testing.

Abstract: The present disclosure describes methods and apparatus for differentiating subscriber devices of a subscriber hidden by a network address translation device and enables traffic flow steering on a per device basis rather than a per subscriber basis. Identification of subscriber devices is achieved by assigning a reserved set of external ports to each subscriber device. Different service paths can be defined for different subscriber devices to provide a subscriber with a different experience for each subscriber device of the subscriber.

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract: A method of enhancing Quality of Experience (QoE) associated with an application flow for an end-user in a communication network comprises: receiving a packet belonging to the application flow, the packet comprising QoE information determined based on previous packets exchanged within the application flow; decoding the QoE information from the received packet; and adjusting a QoS mechanism for the packet, based on the decoded QoE information for enhancing the QoE of the application flow. A network node for carrying out this method is disclosed. Also, a method for relaying QoE associated with an application flow for an end-user in a communication network comprises: receiving packets belonging to the application flow; calculating QoE information based on the received packets; and sending the calculated QoE information back to the communication network, the QoE information being included in a packet belonging to the application flow. A network node for carrying out this method is disclosed.

Abstract: A method, for use in a data center having tenants, of routing an IPv4 packet over an IPv6 network as an IPv6 packet includes: receiving the IPv4 packet from a first virtual machine associated with a first tenant and addressed to a second virtual machine associated with a second tenant; generating the header of the IPv6 packet to include an IPv6 address determined by applying a reversible transformation to one of: a combination of the IPv4 source address and an identifier of the first tenant, and a combination of the IPv4 destination address and an identifier of the second tenant; generating the payload of the IPv6 packet based on the payload of the received IPv4 packet; generating the IPv6 packet by assembling the generated payload with the generated header of the IPv6 packet; and transmitting the generated IPv6 packet over the IPv6 network to the second virtual machine.

Abstract: Systems and methods provide for authenticating a device. A method for authenticating a device can include receiving, at communications node, a first message, wherein the first message includes a first Extensible Authentication Protocol (EAP) packet which includes an EAP (Identify) ID response and a first destination address; generating, by the communications node, a second message, wherein the second message includes the first EAP ID response and a second destination address which is different from the first destination address; and transmitting, by the communications node, the second message toward the second destination address.

Abstract: A network element in a network is provided. The network element includes a receiver that receives a content request message. The received content request message indicates content to be transmitted to a device. The network element includes a processor in communication with the receiver. The processor generates a modified content request message by inserting identification data into the content request message. The identification data identifies at least one of a plurality of network nodes in the network. The network element includes a transmitter that transmits the modified content request message to a content distribution network server. The receiver further receives a redirect message that is based on the transmitted modified content request message. The redirect message identifies that a one of the plurality of network nodes is a cache location storing the indicated content.

Abstract: An edge node of an Access/Network Service Provider (ANP) network tracks the delivery into the ANP network of content from Contzzent Providers (CP), and generates accounting sessions with an accounting server. The edge node is provisioned with the IP addresses of known CP servers. A content delivery session, characterized by a CP IP address and a content identifier, such as a Differentiated Service Code Point (DSCP) value, is started upon the source IP address of a packet matching a known CP, and a packet count is incremented for each subsequent packet from the CP with the same content identifier. An accounting session is initiated with an accounting server when the content delivery session is started, and the accounting session is terminated, with the packet count for the session, upon a time-out since the last packet received. Multiple content delivery sessions may be ongoing simultaneously.

Abstract: A method and a Mobile Node are provided for authenticating an Advertisement message received from an Access Router through an Access Point. The Advertisement message comprises a Hashed Nonce Value and a Nonce Index corresponding to a Nonce Value held in the Access Router. Upon receiving the Advertisement message from the Access Point, the Mobile Node initiates a process for configuring an IP address, by use of information received in the Advertisement, for having a session with the Access Point and the Access Router. In parallel, either the Access Point or the Mobile Node sends the Nonce Index directly to the Access Router. The Access Router replies with the Nonce Value sent to the Mobile Node. The Mobile Node hashes the Nonce Value received from the Access Router and compares a Result of the hashing with the Hashed Nonce Value. If the Result matches the Hashed Nonce Value, the Advertisement is considered authenticated and the IP address configured according to the Advertisement is kept in the Mobile Node.

Abstract: Methods, Mobile Node and Mobility Access gateway for enabling vertical handoff of the Mobile Node between a first and second network interfaces using a pad translator.

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract: A method and nodes are provided for registering a terminal. The terminal is capable of connecting in two distinct networks. The registration process for the terminal maps an identity and traffic handling policies of the terminal in a first network with an address prefix of the terminal obtained from the second network. The address prefix is obtained from the second network following authorization of the terminal in the first network. As traffic is exchanged between the terminal and a correspondent node while the terminal is accessing the second network, the mapping is used to ensure that policies for the terminal in the first network are applied in the second network.

Abstract: Systems and methods are described which provide communication between a correspondent node and a mobile node including receiving a home prefix of the mobile node and a list of correspondent nodes by a mobile access gateway having an access link with the mobile node and submitting proxy binding update messages by the mobile access gateway to a home agent corresponding to the mobile node and to each of the correspondent nodes in the list.

Abstract: A method and nodes are provided for localizing traffic between communication nodes receiving service from a same network. A local mobility anchor informs media access gateways providing access to two communication nodes of each other's addresses. Traffic exchanged between the two communication nodes connected to the same network via these media access gateways are routed directly between the gateways, bypassing the local mobility anchor.