Abstract: A method of controlling concurrent users of a distributed resource on a network is disclosed. In one aspect, there are one or more local lock managers executing on corresponding hosts and cooperating as a distributed lock manager. The resource is limited to a maximum number of concurrent users. A user identification for each user is associated with one host. In response to a request associated with a particular user associated with a first host, a lock is requested from a first local lock manager process executing on the first host. A related method of handling a request for a count-limited resource includes receiving a request from a client process for the computer resource. If it is determined that the request exceeds a maximum count for the resource, then it is determined whether a current time is within a retry time period of the client's first request.

Abstract: Techniques for dynamically distribute replication points based on routing metrics are provided. A receiver list may be split based on the routing metrics. For example, the receiver list may be split based on unicast reachability over an interface. If portions of egress routers are reachable over different interfaces, the portions are included together in a sublist. Thus, the list is split into sublists based on the reachability. Point-to-point links are then set up between a head end router and an egress router in each sublist. The sublist is then sent to each egress router, which can perform the process above in setting up a point-to-point link to another egress router in each sublist.

Abstract: An electronic device has a physical port, and a control circuit coupled to the physical port. The control circuit is arranged to electrically sense the physical port, and operate the physical port as one of an Ethernet port and an RS-232 port based on electrically sensing the physical port. In some arrangements, the physical port operates as an Ethernet port at one time and an RS-232 port at another time. In some arrangements, the electronic device senses for Ethernet signals and RS-232 signals concurrently. In other arrangements, the electronic device senses for Ethernet signals and RS-232 signals at different times in an alternating manner.

Abstract: A method of securely exchanging cryptographic identities through a mutually trusted intermediary is disclosed. Data, which specifies a petitioner's cryptographic identity and a petitioner's resource identifier, is received. Input, which specifies an authority's resource identifier, is received. The petitioner's cryptographic identity and the petitioner's resource identifier are sent to a destination that is associated with the authority's resource identifier. Data, which specifies the authority's cryptographic identity, is received. The authority's cryptographic identity is sent to a destination that is associated with the petitioner's resource identifier.

Abstract: In one embodiment, a wireless access point wirelessly receives identification information from a portable computing device, determines a particular communication medium access provider identified in the identification information, wirelessly receives data from the portable computing device, and transmits the data to a destination of the particular communication medium access provider. In one embodiment, the wireless access point communicates with the portable computing device using wireless Ethernet, listens for all types of identification information and answers all queries from the portable computing device even if the wireless access point does not recognize the identification information, and provides the portable computing devices access to a plurality of communication medium access providers.

Abstract: In a link state protocol such as an interior gateway protocol (IGP), link state advertisements or link state packets (LSA/LSPs) are sent only to network nodes that have expressed interest in them, rather than always flooding them.

Abstract: An edge router termed a “service gateway” operates to reassign network addresses such as Internet Protocol (IP) addresses to a subscriber, such as when the subscriber is to be transitioned from a first virtual private network (VPN) to a second VPN. The service gateway obtains a new network address routable in a second VPN and applies dynamic edge network address translation (NAT) on an interim basis to provide instant access to the second VPN (following web-based identification for example), while a prior lease for an initial network address not routable in the second VPN is still in effect. When the subscriber attempts to renew the lease in due course, the renewal request is rejected, which forces the subscriber to re-initiate dynamic host control protocol (DHCP) procedures to obtain a new network address. At this point, the interim NAT mapping is removed and the new network address is assigned directly to the subscriber via DHCP.

Abstract: In one embodiment, a node determines a ratio of traffic that is to be marked at an output. The node also determines if an input feeding the output has less traffic marked than is to be marked at the output, and marks unmarked traffic of that particular input corresponding to a ratio substantially equal to the difference between what is needed at the output and what is marked at the input. Also, in one embodiment, a node may determine a fair share of an output for unconstrained inputs (e.g., a preemption threshold divided among the inputs, taking into consideration inputs that use less than their fair share), and mark traffic accordingly.

Abstract: Methods and apparatus are disclosed for using gap packets to create a bandwidth buffer over which packets can be sent to reduce or eliminate overflow conditions. One implementation sends a series of packets from a first device to a second device, the series of packets including interspersed information packets and gap packets. The first device determines when to insert the gap packets into the series of packets, and the gap packets received by the second device are dropped. The determination of when to insert one of the gap packets into the series of packets may be based on an occupancy level of a buffer, such as, but not limited to comparing it to a predetermined or variable threshold value. Also, the rate of sending gap packets and/or the size of the gap packets may be varied to adjust the size of bandwidth buffer created by the gap packets.

Abstract: A method is provided for generating a backup route. Here, a route and a route distinguisher type associated with the route are received and a backup route is generated based on attributes of the route. A particular backup route distinguisher type that is associated with the route distinguisher type is assigned to the backup route. The backup route with the backup route distinguisher type are then advertised. Another method is provided that identifies the backup route. When the route and its route distinguisher type are received from the advertisement, an identification is made as to whether the route distinguisher type is assigned to a backup route. The route may then be designated as a backup route based on the identification.

Abstract: In one example, a Cable Modem Termination System (CMTS) sends first bandwidth allocation messages to a first upstream transmit interface on a cable modem and send second bandwidth allocation messages to a second upstream transmit interface on the cable modem. The bandwidth allocation messages indicate transmit windows for the cable modem to range over the interfaces. The transmit windows included in the first bandwidth allocation messages are spaced based on receipt of ranging requests from the second upstream transmit interface, and the transmit windows included in the second bandwidth allocation messages are spaced based on receipt of ranging requests from the first upstream transmit interface.

Abstract: A system and method for bidirectional forwarding detection (BFD) rate-limiting and automatic BFD session activation includes tracking a total bidirectional forwarding detection (BFD) packet rate for a line card (LC) of the node, and rejecting operations associated with creation of a new BFD session that would cause the total BFD packet rate to exceed a predetermined maximum rate. The new BFD session is stored in a state on the node and the operations of the new BFD session are automatically retried at a time when doing so would not exceed the predetermined maximum rate. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. 37 CFR 1.72(b).

Abstract: Techniques are provided to performing beamforming on a wireless communication link that employs multi-carrier code division multiple access (MC-CDMA) signal formatting techniques. At a first wireless communication device, a waveform is received at each of a plurality of antennas, where the waveform comprises a multi-carrier code division multiple access ranging transmission from each of one or more of a plurality of second wireless communication devices such that MC-CDMA ranging transmissions from two or more second wireless communication devices overlap in time and frequency. All codes in a set of possible codes that may be used by the second wireless communication devices are searched to determine whether which codes in the set are present in the one or more MC-CDMA ranging transmissions contained in the received waveform.

Abstract: A hierarchical multi-rate multi-precedence policer is disclosed. The policer discards packets based on assigned precedence levels. When traffic exceeds an available service rate, the policer drops packets of lower precedence levels to make room for packets of higher precedence levels. In certain implementations, the policer also guarantees bandwidth to each level, thus preventing complete loss of lower precedence traffic when there is a large amount of higher precedence traffic.

Abstract: A method and apparatus for managing a wireless local area network are disclosed. The network includes one or more wireless access points, each including a radio frequency assembly having a variable power output, and an antenna assembly for transmitting and receiving wireless signals. A microcontroller is included for sending a transmission characteristics signal to the wireless local area network. A network manager is included for receiving the transmission characteristics signal and selectively controlling the variable power output of the radio frequency assembly to a predetermined power level.

Abstract: An agent locking a resource in a device in response to receiving an explicit request to lock the resource. Once in a locked state, access to entities (applications, devices, etc.) other than a owner of the lock may be restricted (e.g., no access, only read access, etc.). The agent unlocks the resource in response to an unlock request or if keep-alive messages are not received for a long duration.

Abstract: Methods and apparatus are provided for enhancing security and features during cable modem configuration. According to various embodiments, a cable network head end is configured to ensure that a cable modem subscriber registers with its assigned configuration profile. Techniques for verifying parameters in a received configuration profile, enhancing authentication, preventing access to provisioning servers, securing communications, and enhancing feature sets are provided.

Abstract: Methods and systems for determining the operations performed on packets by a network device are described. A simulated packet is input into a network device. The path taken by the simulated packet is traced. Also, the operations performed on the simulated packet are logged. Further, the operations performed on the simulated packet and configuration information of the operations are analyzed and displayed.