Abstract: A DSL 5 is connected between an exchange device 3 and an IAD1 to which DSL subscriber terminals 2-1 through 2-n are connected, and the exchange device 3 is equipped with a VMG 4 for terminating an ATM cell multiplexed over the DSL 5, a voice packet transmitted as multiplexed over the DSL 5 is directly terminated at the exchange device 3, which in turn converts the voice packet into a packet according to an existing exchange device interface 8, so that DSL subscribers can be accommodated in the exchange device 3 directly and also exchange device software for operating the exchange device 3 can control call processing without knowing about a device under the control of a subscriber control unit, as a result, user burdens can be mitigated. The invention may be embodied in other specific forms without departing from the spirit or essential characteristic thereof.

Abstract: In a method for terminating a plurality of ATM lines for a base station modulator/demodulator in a mobile communication system for data communication between upper stations and a base station by a transmission method wherein ATM cells are mapped utilizing an existing leased line as a physical medium sublayer, when an increase in capacity of the base station necessitates leased line interfaces corresponding to a plurality of upper stations, processing is carried out in such a manner that leased line numbers are added to respective HEC regions of ATM cells sent from each upper station into a leased line interface section, whereby the addition of the function of the leased line interface section involved in an increase in the leased line can be minimized and the additional function can be simply designed utilizing a conventional technique.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet. An input port receives a data packet, a switching board classifies the data packet, determines whether the data packet should be accepted, and switches the data packet to a management board if the data packet is a first data packet in a session, and to a processing board if the data packet is not a first data packet in a session. A management board receives a data packet from the switching board, examines the data packet and forwards the data packet to one of the processing boards. One or more processing boards receives non-first data packets from the switching board and data packets from the management board and processes the data packets. A firewall and a secure gateway with firewall and virtual private network functionality for processing a data packet are also described.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet in a packet forwarding device. A data packet is received. A virtual local area network destination is determined for the received data packet, and a set of rules associated with the virtual local area network destination is identified. The rules are applied to the data packet. If a virtual local area network destination has been determined for the received data packet, the data packet is output to the destination, using the result from the application of the rules. If no destination has been determined, the data packet is dropped. A security system for partitioning security system resources into a plurality of separate security domains that are configurable to enforce one or more policies and to allocate security system resources to the one or more security domains, is also described.

Abstract: A frame analyzer component and a memory management unit process frames received over cable television lines. The frame analyzer component may receive frames that were transmitted over the cable television lines and that were processed by a digital signal processor. The frame analyzer component checks incoming frames or frame fragments for consistency and errors. Results from the frame analyzer component relative to frame fragments may be stored in a context memory. When a later fragment of the frame arrives, the previous context of the frame can be restored and used to continue processing the frame. The memory management unit stores the frames and frame fragments in separate memory management tables.

Abstract: A DSL 5 is connected between an exchange device 3 and an IAD1 to which DSL subscriber terminals 2-1 through 2-n are connected, and the exchange device 3 is equipped with a VMG 4 for terminating an ATM cell multiplexed over the DSL 5, a voice packet transmitted as multiplexed over the DSL 5 is directly terminated at the exchange device 3, which in turn converts the voice packet into a packet according to an existing exchange device interface 8, so that DSL subscribers can be accommodated in the exchange device 3 directly and also exchange device software for operating the exchange device 3 can control call processing without knowing about a device under the control of a subscriber control unit, as a result, user burdens can be mitigated.

Abstract: Techniques for modifying requests or browser viewable documents (e.g., markup language documents) are described. By modifying requests or browser viewable documents, access to resources residing on remote servers through an intermediate server is facilitated. In one embodiment, Universal Resource Locators (URLs) associated with requests or markup language documents are modified. The techniques are suitable for both secure and unsecure requests. The techniques can also modify requests or browser viewable documents at the intermediate server, a client device, or both.

Abstract: A system balances bandwidth used by a data stream. The system receives data in the data stream and partitions the data into bursts. The system then identifies whether a size of a current one of the bursts is less than a size of a maximum burst associated with the data stream and schedules an additional burst in the data stream when the current burst size is less than the maximum burst size. The system transmits the current burst and the additional burst to balance bandwidth used by the data stream.

Abstract: A pipelined reorder engine reorders data items received over a network on a per-source basis. Context memories correspond to each of the possible sources. The pipeline includes a plurality of pipeline stages that together simultaneously operate on the data items. The context memories are operatively coupled to the pipeline stages and store information relating to a state of reordering for each of the sources. The pipeline stages read from and update the context memories based on the source of the data item being processed.

Abstract: A network device for performing redirect checking includes an input device and processing logic. The input device receives a data packet on a first one of a number of interfaces. The data packet includes source and destination addresses. The processing logic assigns an incoming interface to the data packet and generates forwarding information identifying a next hop for the data packet. The processing logic also identifies an outgoing interface based on the next hop and determines whether the incoming interface index is equal to the outgoing interface index. The processing logic also determines whether the data packet originated from a station that is part of the same subnet as the next hop. When both of these conditions are met, the processing logic generates a redirect message.

Abstract: A cross-bar switch includes a set of input ports to receive data packets and a set of sink ports in communication with the input ports to receive the data packets and forward them onto a communications link. Each sink port is adapted to concurrently receive multiple data packets targeted to the same destination or multiple destinations. For example, one sink port receives a first data packet and a second data packet. The one sink port receives at least a portion of the second data packet during a time period in which the one sink port is receiving the first data packet.

Abstract: A virtual management system for a network facility, such as a data center, or any facility having a plurality of components which can be organized as objects for presentation in a virtualized environment, is disclosed. The system includes a management topology presenting devices, facilities, subscribers, log servers, and services as objects to an administrative interface; and a configuration manager implementing changes to objects in the topology responsive to configuration input from an administrator via the administrative interface. In an exemplary embodiment, the user interface is a graphical user interface designed to work in a platform independent environment. The system may include a management server coupled to the plurality of objects. In one aspect, the management server communicates with the devices, downloading configuration data to and uploading configuration data from, the devices. The management server and the interface may communicate via a LAN, WAN or the Internet.

Abstract: A desired level of failover in a system is ensured by (i) capturing information about elements, such as components, modules, sub-systems, data, programs, routines, and/or information, etc. (referred to generally as “elements”), (ii) determining whether failover is compromised to an unacceptable degree, and (iii) persistently reporting compromised failover until proper remedial actions are taken.

Abstract: A network router management interface for use in configuring a router and obtaining operational information provides an application programming interface (API) that permits clients to formulate requests and receive replies according to an extensible markup language such as XML. The router may transform a login stream at a router command line interface (CLI) to implement the XML-based API. For example, the management server accepts input from the CLI and, upon receipt of a particular command from the client, transforms the CLI into a programmatic interface for exchange of XML-tagged requests and XML-tagged replies according to the XML-based API. Providing access to the XML-based API via the CLI login shell enables the use of standard login, security, authentication and authorization techniques.

Abstract: Plural arbiters arbitrate over a set of queues. The arbiters are constructed as a series of pipelined stages. Conflict detection logic detects conflicts among the arbiters in arbitrating across the queues, and, when a conflict is detected, the conflict detection logic alters processing related to conflicting queues in one arbiter when another arbiter has not passed a predetermined commit point in processing the queue.

Abstract: A cross-bar switch includes a set of input ports for receiving data packets and a set of sink ports for transmitting the received packets to identified targets. A set of data rings couples the input ports to the sink ports. Each sink port utilizes the set of data rings to simultaneously accept multiple data packets targeted to the same destination—creating a non-blocking cross-bar switch. Sink ports are also each capable of supporting multiple targets—providing the cross-bar switch with implicit multicast capability.

Abstract: A cross-bar switch includes a set of input ports and a set of sink ports in communication with the input ports. The input ports receive packets, which are snooped by the sink ports. The cross-bar switch also includes a set of port address tables. Each port address table is adapted to store data identifying a plurality of destinations supported by a sink port. For example, a first port address table is adapted to identify a plurality of destinations supported by a first sink port in the set of sink ports. When determining whether to accept a packet, a sink port considers whether the packet's destination is identified in the sink port's port address table. By supporting multiple destinations, a port address table implicitly facilitates a sink port's multicast operation.

Abstract: In an asynchronous transfer mode switch, a plurality of queues is provided for accumulating transfer cells, and a queue assignment processing section, receives a message for establishing a connection and assigns to the connection one of the queues having a forwarding rate close to a declared rate included in the message and not exceeding the declared rate.

Abstract: The invention provides an arbitration method and an arbiter circuit in which sets of storage members having an associated output rate, and sets of arbitration members to be successively linked in multi-stage subordinate/superior relation and arbitrate data transfer from the storage members. One of the sets of the arbitration members may include first arbitration members to respectively connect to the storage members, each first arbitration member having an associated transfer rate corresponding to a sum of the output rates associated with the storage members of the set to which the first arbitration member connects.

Abstract: Methods and apparatus for implementing bi-directional logical signal interfaces (LSIs) in communications systems which use uni-directional label switched paths (LSPs), e.g., MPLS networks, are described. To implement an LSI, two uni-directional LSPs between the same end points, e.g., routers, and extending in opposite directions, are associated together. The association of LSPs may be done by setting LSI configuration information in the routers at both ends of an LSI. Each router at the end of an LSI serves as an egress router for one of the LSPs associated with the LSI and an ingress router for the other LSP associated with the LSI. To enable an egress router to determine which, if any, LSI a packet or message corresponds to, a real as opposed to a null label is used when sending packets over an LSI LSP to an LSI LSP egress router.