Abstract: The present invention is directed at rebooting a cluster while maintaining cluster operation. Cluster operation is automatically maintained during the reboot since at least one member of the cluster stays active during the process. An administrator triggers the reboot process and then does not have to perform any other steps during the reboot process. An algorithm executes which reboots members of the cluster at different times, while always maintaining operation of at least one member of the cluster.

Abstract: A system, apparatus, and method are directed to managing multicast routing using a network cluster. A cluster master actively participates in multicast control protocol communications with the cluster neighbors, while non-master member nodes, do not participate in the protocols' operation outside of the cluster. However, each cluster member maintains virtually the same protocol state, such that should the master become unavailable, another cluster member may assume the master role with minimum delay. New members to the cluster are synchronized by receiving initial protocol state information from the master. After the initial protocol state synchronization, cluster members actively monitor the network to acquire new protocol state information. In addition, cluster members exchange protocol state information between themselves that may not be obtainable off the network. Filtering of multicast data packets is performed by each cluster member, to load balance multicast data traffic across the cluster members.

Abstract: A system for multicasting a data packet in a multicast group includes a network entity, and a plurality of members of the multicast group. A member can notify the network entity of a rogue member of the group claiming an identity of a spoofed member of the group. In response to being notified, the network entity can distribute, to at least the members of the group other than the spoofed member, different versions of a symmetric key associated with the spoofed member. The member notifying the network entity of the rogue member can then receive a next data packet and a code for the next data packet, the code having been generated at the rogue member using a version of the symmetric key associated with the spoofed member such that the rogue member can be identified based upon the version of the symmetric key.

Abstract: When mobile node is connected to an access point outside the private network, a tunnel is formed between the mobile node and a home agent on the private network for the transfer of packets. When, the mobile node roams into a region accessible to the private network, the mobile node is connected to the private network using a private network access point while maintaining the tunnel between the mobile node and the home agent.

Abstract: A system (10) and method are provided for restoring the flow of a data stream in the event of a link (28) failure while avoiding delays due to down time. The system (10) for passing the data stream at a particular transmission rate includes a first unit (20, 22) at the first location coupled to one end of each of a plurality of links (28), at least two trained links (28) selected from the links (28) that are set to active status, a second unit (22, 20) at the second location coupled to the other end of each of the links (28), and at least one idle link (28), wherein the first unit (20, 22) and the second unit (22, 20) switch to use the idle link (28) to replace any one of the trained links (28) that has failed.

Abstract: Methods, apparatus and systems are directed to managing network traffic using a variable length Cyclical Redundancy Check (CRC) index to hash an address header. The invention copies an address header of a data packet to a CRC generator. A CRC index is determined based, in part, on the address header. A subset of bits is determined from the CRC index based, in part, on a predetermined bit mask. The address header and the data payload are then combined with the subset of bits from the CRC index. The modified data packet is subsequently forwarded over a network. In one embodiment, the invention is implemented on a hardware circuit residing on a traffic device.

Abstract: A system and method for configuring components of a distributed routing platform using switchtags. The distributed routing platform includes transport service modules that are configured to perform a service on packets. Each of the transport service modules is further configured to perform the service on certain types of packets and to encapsulate other types of packets with a switchtag and forward them to another transport service module in the distributed routing platform.

Abstract: A method and apparatus are provided for measuring a bit rate between a client and a server. In an embodiment of the invention, a number of bits included only within one or more transaction units are measured over a time period. The time period is a sum of time durations of each of the transaction units. In an embodiment of the invention, bit rate measurements are performed on a server and in another embodiment of the invention bit rate measurements are performed on a client. Embodiments of the invention include adapting, by the server, of content to be sent to the client based on the bit rate measurements. Embodiments of the invention further include reporting the measured bit rate to the server when the bit rate measurements are performed on the client. Other aspects of the invention include sending an indication of the measured bit rate and a desired bit rate to the server when bit rate measurements are performed in the client.

Abstract: The security keys in the mobile terminals and access points of a wireless local area network (WLAN) are created, utilized and managed for a communication session between a mobile terminal and access point. Both the WLAN link level security protection and IP security functions of the network use the same Internet Key Exchange (IKE) key management protocol and use certificates in the same certificate hierarchy. When the mobile terminals associates with the network, it uses the IKE protocol with private keys and certificates to generate WLAN link level keys with the access point and provide mutual authentication.

Abstract: The present invention relates to a method and system for supporting in a router a plurality of data flows using a ternary content addressable memory (TCAM) in which the number of accesses to write to the TCAM is optimized to improve efficiency of updating and subsequent look up. To accommodate the plurality of data flows, the TCAM is partitioned into at least two partitions in which a first portion includes indices having a higher priority and a second portion includes indices having a lower priority. For example, multiple protocol label switching (MPLS) flows and IP-Virtual Private Network (VPN) can be added to the first partition and policy based routing flows can be added to the second partition. During subsequent TCAM look-up of a prefix of an incoming packet the MPLS or IP-VPN flow will subsume any matching policy based routing flow, such as flows classified by an access control list or traffic manager flows.

Abstract: In a GPRS core network, MPLS-based Label Switched Paths (LSPs) between Serving GPRS Support Nodes (SGSN) and Gateway GPRS Support Nodes (GGSN) are established for different types of traffic across the core network during a traffic engineering phase. The queuing and forwarding treatment offered to packets at internal nodes along these routes are based on DiffServ per-hop behavior (PHB) groups to which each packet is assigned at the edge of the core network, i.e., at SGSN or GGSN. In one embodiment of the invention, PDP messaging that occurs at the time of activation of PDP context can be used to assign the corresponding packet stream to particular LSP and PHB. When an MS changes serving SGSN due to mobility, it is only required to change the label mapping context at a GGSN, thereby allowing subsequent packets targeted to the MS to be routed to new SGSN.

Abstract: Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Abstract: Maintaining a current network address between a network device and a network management system (NMS) that enables central configuration control over a number of network devices. Network devices with dynamically changeable network addresses provide address updates to a listener system, which maintains a database of current IP addresses relative to device names. The network devices communicate with the listener system via a listener network address and a first predefined port. The NMS submits a device name to the listener system in a request for a current network address via a second predefined port. The listener system optionally checks a local hosts file and/or DNS server before resolving a current network address from the device name associated with a unique MAC address. The listener system provides the NMS with the current network address when requested by the NMS or immediately if the NMS registers for immediate notification of an address change.

Abstract: A method for using Patricia tree and longest prefix match for policy-based route look-up is described. Five route classes are determined based on a source address, a source address length, a destination address, a destination address length, and an ingress interface. Route classes are prioritized based on their content. A prefix for the first two route classes includes source and destination information. A prefix for the third and fourth route classes includes source information only. A prefix for the fifth route class includes destination information only. Four different route keys are constructed based on the route classes. The route keys are stored in a Patricia tree structure. For routing a data packet, a longest prefix match look-up is performed for a route key in descending priority order for the route classes.

Abstract: A system (10) and method are provided for phase aligning two timing signals when the timing signals are out of phase. The system (10) includes a selection unit (12) coupled to timing sources (14, 16), a detection means (18, 20) coupled to the selection unit (12) for detecting a failure and causing the selection unit (12) to switch to another timing source, and a unit coupled to the selection unit for phase comparing, wherein the unit introduces gradual phase alterations to the second timing signal until the first and second timing signals are in-phase.

Abstract: A method and system for managing electronic mail (email) based on a user oriented penalty count (PC) random rejection. The invention determines a threshold for a specific user and assesses a cumulative PC for usage of a resource that exceeds the user specific threshold. Different operating states are determined based on a status associated with the resource. In a normal operating state, virtually all sent email is processed. In a selective-rejection state, sent email from a user with a cumulative PC is rejected randomly, while others are processed. In a random-rejection state, sent email from a user without a cumulative PC is randomly rejected based on a resource usage factor and an adjustment multiplier, while sent email from a user with a cumulative PC is completely rejected. The user may be assigned an exempt status that enables processing of virtually all email from the user independent of user's PC.

Abstract: A system and method that are directed towards developing a computer user interface employing a Personal Support Infrastructure (PSI) stack. The PSI stack is arranged to represent various layers of a human being employing a holistic approach. In one embodiment, the PSI stack may enable organization, development, and solicitation of requirements for the development of a human-machine interface, such as for a mobile device, and the like. In one embodiment, the PSI stack is configured as a data structure that may be populated with elicitations oriented towards developing the set of human-machine interface requirements.

Abstract: A system and method for discovering network elements are disclosed where each network element includes a multicast packet sender for issuing a multicast packet addressed to a unique group, including a local register host, located in a common subnet. A packet analyzer in the local register host determines the identification of the issuing network element for comparison with entries in a local register host device table. The device table is continually synchronized with a master device table resident in a central management station by either adding a new entry in the master device table if the issuing network element has come ‘online’ or by deleting an existing entry for a network element which has not issued a multicast packet within a specified time.

Abstract: Enabling control over multiple forms of communication to a recipient, such as email, instant messages, cell phone calls, conventional phone calls, faxes, and the like. The recipient defines rules for authenticating senders and for determining when, where, and how communication from the senders is transmitted to the recipient's preferred receiving device(s). The rules are stored in a database of a central service. The central service applies the rules to incoming email, instant messages, calls, faxes, etc. The central service screens unauthentic senders according the recipients rules associated with each form of communication, requiring the sender to provide some proof of identification. If authenticated, the central service enables a sender to communicate with the recipient via the recipient's currently preferred receiving device.

Abstract: A system and method are directed towards enabling and/or disabling a selection of a version of a network management protocol, such as SNMP. When a networking system is configured using an earlier version of SNMP, such as version 1 or 2, and is to be reconfigured to employ a later version such as version 3, certain options are to be reconfigured. Such options for example, include usage of a community string. When the networking system is to be configured back to the earlier version, the options are again reconfigured. The present invention enables an administrator of the computing system to manage such changes, in part, by abstracting the switching details, without the need to track a progression of events. Moreover, a state of the versions is tracked, such that if the networking system is switched back to version 1 or 2, the last configured community string value is restored.