Abstract: A method and system for transmitting messages in a communications network is disclosed. A signaling gateway receives a message directed to a destination circuit. The signaling gateway is coupled to multiple voice gateways, including a destination voice gateway coupled to the destination circuit. The signaling gateway determines the destination voice gateway and sends the message to the destination voice gateway.

Abstract: Methods and apparatus for dynamically generating authentication keys are disclosed. Specifically, a Mobile-Foreign authentication key is separately generated by both the Mobile Node and Foreign Agent. Similarly, a Foreign-Home authentication key is separately generated by the Foreign Agent and the Home Agent. In accordance with one embodiment, generation of the Mobile-Foreign authentication key and Foreign-Home authentication key are accomplished via the Diffie-Hellman key generation scheme.

Abstract: In a telephony system have management of telephony devices distributed among multiple call management devices, the call management devices use call redirection and relaying of message waiting indications to provide voicemail services to the telephony devices using a centralized voicemail server.

Abstract: In one embodiment, a method for tracing a connection path from a source node to a destination node through a network having one or more transparent proxies includes generating a trace packet at the source node, transmitting the trace packet over the network towards the destination node, and receiving trace response packets in response to transmission of the trace packet. The trace response packets include a packet from the destination node and a packet from each of the transparent proxies in a data path from the source node to the destination node. Each of the packets from the transparent proxies includes an identifier of the transparent proxy transmitting the packet. The method further includes identifying the transparent proxies in the connection path based on information in the trace response packets. An apparatus for tracing a connection path is also disclosed.

Abstract: A technique shares a port (e.g., a physical port) among a plurality of virtual bridges on a switch in a computer network. According to the novel technique, two or more virtual bridges are established on the switch, and are each assigned respective sets of Virtual Local Area Networks (VLANs). Each virtual bridge has a virtual interface corresponding to the physical port (a “shared trunk”), the virtual bridges regarding the virtual interfaces as though they were physical ports. Control messages transmitted by the virtual bridges on the virtual interfaces are sent over the physical port and to each other virtual interface of the port (the shared trunk), such as, e.g., by a virtual hub of the shared trunk. Also, control messages received on the physical port are sent over each virtual interface to each virtual bridge (e.g., by the virtual hub).

Abstract: A system and method detects and responds to failures occurring in a virtual switch. The virtual switch is formed from two or more physical switches interconnected by a Virtual Switch Link (VSL). One physical switch is elected the Master, and it executes a link aggregation protocol for the virtual switch. If the VSL fails, one of the other physical switches assumes that it should become the Master for the virtual switch, and it begins executing the link aggregation protocol. By adding information unique to the physical switches in the control packets of the link aggregation protocol, remote switches can identify when the VSL fails, and report this condition to the original Master. In response, the original Master or the new Master takes corrective action.

Abstract: An IPv4 host is able to maintain connectivity within an access network while moving among access points of the access network, based on receiving a unique assigned IPv4 address from a clusterhead of the access network. Any DHCP request by the IPv4 host is sent via the connecting access point to the clusterhead. The clusterhead, providing connectivity for hosts in the access network to a wide area network based on respective entries, assigns the IPv4 address to the IPv4 host, based on storing an entry including the IPv4 address and an IP-based identifier of the connecting access point, and sends a DHCP response to the IPv4 host via the connecting access point. A second DHCP request from the IPv4 host to a second access point causes the clusterhead to update the entry with the second access point identifier, enabling the IPv4 host to continue use of the assigned IPv4 address.

Abstract: A method and apparatus for modifying the configuration of a network device, such as a router, using a two-stage configuration model is provided. A first request from a user for a change in configuration of a network device is received. Configuration data associated with the first request is stored. A second request to modify the configuration of the network device to reflect the configuration data is received. An exclusive lock on the network device is assigned to the user preventing other users from modifying the configuration of the network device. The current operational state of the network device is modified to reflect the configuration data, which is then stored in a device configuration database. Users can view configuration history data to view prior configurations of the network device. Multiple users may modify the network device without interfering with one another because conflicts are avoided through use of an exclusive lock.

Abstract: A method and apparatus resynchronizes a link state database (LSDB) of a non-stop forwarding (NSF) router with the LSDB of a neighboring router (“neighbor”) while maintaining an existing adjacency with the neighbor in a computer network. An out-of-band resynchronization process executes on the routers to essentially maintain the existing adjacency between the router and neighbor, rather than resetting that adjacency as defined by a conventional resynchronization approach. By keeping the adjacency “up” from the perspective of a routing protocol, such as the Open Shortest Path First routing protocol, the adjacency can be used for continued data traffic to and from the NSF router.

Abstract: A method and system for providing wireless-specific services for a wireless access network includes receiving at a call agent of a wireless access network a call origination for a mobile device. Whether the device is registered on the wireless access network is determined. If the mobile device is not registered, whether the mobile device is active is determined at a mobility control function (MCF). If the mobile device is active, the call is connected to the mobile device with a call agent based on a temporary line directory number (TLDN) assigned by the MCF and passed to the call agent in an extended session initiation protocol (SIP) message.

Abstract: Disclosed is a method and associated apparatus for automatically propagating circuit information in a network. In one embodiment, a network includes multiple circuit switches that are coupled using communications links. Information relating to the communications links are automatically propagated in the network using a protocol used by routers in communicating with other routers.

Abstract: An improved method and system for connecting Super Group 3 fax machines over network gateways that operate using the un-enhanced T.38 protocol. With the present invention, the CM tone is suppressed. Thus a gateway that generates an AnsAm tone, will not receive a CM tone in response. The T.38 protocol does not specify what occurs if a CM tone is not received; however, it has been found that, in practice, existing fax machines fall back to V.21 mode if a CM tone is not received.

Abstract: A Machine Authentication PAC (Protected Access Credential) serves as machine credentials to obtain network access without requiring server storage and management of the additional set of credentials. The first time authentication is performed, user authentication is executed. After the supplicant and server have mutually authenticated each other and satisfied other validations, the supplicant requests a Machine Authentication PAC from the server. The Server randomly generates a cryptographic key (Device Key) and sends it to the supplicant along with an encrypted ticket, comprising the Device Key and other information and encrypted with a key only known to the Server. The supplicant caches the Machine Authentication PAC in its non-volatile memory for future use. When the machine needs to access certain network services before a user is available, the supplicant uses the Machine Authentication PAC to gain authorization for the machine to limited access on the network, without requiring user input.

Abstract: Techniques and systems for server farm load balancing and resource allocation are disclosed. In one embodiment, a method of load balancing can include: arranging servers into service groups; receiving an access request with information related to a differentiation between the service groups; selecting one of the service groups based on a mapping comparison to the information; and selecting one of the servers within the selected service group based on a hardware utilization comparison. The servers can include GPRS (General Packet Radio Service) Gateway Support Node (GGSN) or Remote Authentication Dial In User Service (RADIUS) servers, for example. The information can include an Access Point Name (APN) or Calling Station ID, for example.

Abstract: Techniques for managing leased network addresses for multiple networks using overlapping address spaces include storing banks of addresses corresponding to the multiple networks. A request for a network address for a host on a first network is received from a relay agent on an intermediate device. The request includes a qualifier associated with the first network by the relay agent. A first bank of addresses is selected based on the qualifier. A first network address from the first bank is identified based at least in part on the request. A response for the host is sent to the relay agent. The response indicates the first network address and the qualifier. Thus a dynamic host configuration protocol (DHCP) server can provide the same network address for several hosts spread over different networks, such as different virtual private networks (VPNs).

Abstract: A modular Cable Modem Termination System (CMTS) includes a packet shelf operating a Data Over Cable Service Interface Specifications (DOCSIS) Media Access Control (MAC) framer. One or more downstream Physical Interface (PHY) shelves receive DOCSIS data from the packet shelf over a packet switched network and modulate the DOCSIS data for sending on a downstream path of a cable plant. One or more upstream PHY shelves send DOCSIS data received from an upstream path of the cable plant over the packet switched network to the packet shelf. By separating the PHY components from the MAC and from the system software, the PHY components for a Hybrid Fiber Coax (HFC) plant may be replaced with different PHY components for other access technologies such as wireless, Digital Subscriber Lines (DSL), Ethernet-to-the-Home, Fiber-to-the-Home, or fiber Passive Optical Networks (PONs).

Abstract: A technique for improving utilization of a data link coupled to a network. Scores are generated for one or more data flows that transfer onto the network via the data link. The scores are kept in a “scorecard” that represents a pool of data flows that are eligible to transfer data onto the data link when the data link becomes idle. Each score represents a rating of a particular data flow's eligibility to transfer data onto the data link when it becomes idle. A check is performed to determine if the data link is idle, and, if so, data associated with the highest scoring data flow are transferred onto the data link.

Abstract: A network management system for managing communications in a cellular communication network comprising an access point operably coupled to an access controller. The network management system comprises an access controller configuration logic module arranged to configure the access controller with configuration information. The network management system further comprises an access point configuration logic module arranged to configure the access point with configuration information comprising, at least in part, configuration information intended for the access controller.

Abstract: Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with pre-dropping of a packet if its Time-To-Live (TTL) value is not large enough to reach a destination, such as, but not limited to, its destination if it is a unicast packet, or at least one more destination for a multicast packet. A packet switching device maintains associations between (a) nearest receiving node distances and (b) prefixes or complete addresses. If a packet does not have enough TTL to reach an intended recipient identified by a corresponding nearest receiving node distance, then the packet is dropped even though the TTL has not expired. In this manner, some bandwidth and other network resources are not wasted on traffic that will timeout via the TTL mechanism before reaching a subsequent intended recipient.

Abstract: A method for preventing movement in a telepresence system, includes a plurality of cameras. Each camera has a respective field of vision for viewing one or more users. The fields of vision each have lateral boundaries. The system also includes a plurality of restrictive elements. Each restrictive element is positioned along a respective lateral boundary of a field of vision of the fields of vision of the plurality of cameras such that viewed users each positioned within a field of vision of the plurality of cameras are restricted by the plurality of restrictive elements from moving outside of the field of vision in which each viewed user is positioned.