Abstract: Systems and methods for measuring frame loss in multipoint networks are provided. In one embodiment, a method for calculating frame loss comprises: performing a first continuity check message exchange between a first and a plurality of other devices, the first exchange comprises the first device collecting a first set of frame count data from each of the first and other devices, the first set of frame count data associated with a first instance of time by a first sequence identifier; performing a second continuity check message exchange between the first and plurality of other devices, the second exchange comprises the first device collecting a second set of frame count data from the first other devices, the second set of frame count data associated with a second instance of time by a second sequence identifier; and calculating a frame loss measurement by accounting for frame Ingress and frame Egress.

Abstract: One or more devices of a network having asymmetric delay are configured to participate in time synchronization protocol sessions in which a client device synchronizes its local clock to a master device. In one example, a system includes an optical line terminal configured to receive a time synchronization protocol packet from a grandmaster clock and an optical network unit (ONU) configured to calculate a residence time of the time synchronization protocol packet, encode the residence time into the packet, and to forward the packet to a client device. Moreover, the system may participate in a plurality of time synchronization protocol sessions with a plurality of client devices, such that the client devices become synchronized in frequency and phase.

Abstract: An access network comprises a first network interface device coupled to a customer network and configured to provide an interface between the access network and the customer network. The access network also comprises a second network interface device coupled to a core network and configured to provide an interface between the access network and the core network. The first network device is configured to insert a Status Type Length Value (TLV) element into a Continuity Check Message (CCM) to form a modified CCM and to transmit the modified CCM to the second network interface device. The Status TLV element includes fields for at least one of a dying gasp indication from a customer premise equipment or performance monitoring data. The second network interface device is configured to store data from the Status TLV in a database entry associated with an identification number of the first network interface device.

Abstract: One or more devices of a network having asymmetric delay are configured to participate in time synchronization protocol sessions in which a client device synchronizes its local clock to a master device. In one example, a system includes an optical line terminal configured to receive a time synchronization protocol packet from a grandmaster clock and an optical network unit (ONU) configured to calculate a residence time of the time synchronization protocol packet, encode the residence time into the packet, and to forward the packet to a client device. Moreover, the system may participate in a plurality of time synchronization protocol sessions with a plurality of client devices, such that the client devices become synchronized in frequency and phase.

Abstract: A demarcation point device positioned at a customer network to provide the customer network access to a service provider network. The demarcation point device comprises a control unit that transmits one or more service query data packets on the customer network to test at least one service within the customer network. The control unit receives one or more service reply data packets from the customer network in response to transmitting the service query data packets, and determines one or more service statistics based on one or more of the service query data packets and the service reply data packets.

Abstract: Systems and methods for multicast admission control are provided. In one embodiment, a node comprises: a first interface configured to receive a multicast channel access request, from a subscriber interface, including an address for a channel; a memory including a subscriber profile and VLAN configuration data for the network; a processor that identifies a first VLAN corresponding to the address from the VLAN configuration data and determines whether the subscriber is authorized to receive the channel via the first VLAN based on access policy designated by the subscriber profile; wherein the processor further determines whether granting access to the channel violates admission control policy based on predefined bandwidth requirements and/or a stream count limit for the first VLAN; wherein when the subscriber interface is authorized to receive the channel and when granting access to the channel does not violate admission control policy, the processor routes the channel to the subscriber.

Abstract: An access node comprises a control unit that determines an anticipated working set of television channels based on a historically delivered working set of television channels to which a subscriber network has previously subscribed. The anticipated working set indicates a time at which the subscriber network is expected to subscribe to a different set of channels. The access node includes at least one interface that couples the access node to the subscriber network, that prior to the time at which the subscriber network is expected to subscribe to the different set of channels, subscribes to the different set of television channels in accordance with the anticipated working set such that media content associated with the different channels of the anticipated working set is available for delivery to the subscriber network at the time during which the access node expects the subscriber network to subscribe to the different set of channels.

Abstract: Systems and methods for measuring frame loss in multipoint networks are provided. In one embodiment, a method for calculating frame loss comprises: performing a first continuity check message exchange between a first and a plurality of other devices, the first exchange comprises the first device collecting a first set of frame count data from each of the first and other devices, the first set of frame count data associated with a first instance of time by a first sequence identifier; performing a second continuity check message exchange between the first and plurality of other devices, the second exchange comprises the first device collecting a second set of frame count data from the first other devices, the second set of frame count data associated with a second instance of time by a second sequence identifier; and calculating a frame loss measurement by accounting for frame Ingress and frame Egress.

Abstract: Systems and methods for measuring frame loss in multipoint networks are provided. In one embodiment, a method for calculating frame loss in a multipoint network is provided. The method comprises: synchronizing local PM frame count bin boundaries across a multipoint network; collecting a first sample of frame count data at a network manager from a first local PM frame count bin for each VLAN Endpoint on the multipoint network; and calculating a frame loss for the multipoint network by accounting for frame ingress and frame egress from the multipoint network based on the first sample of frame count data; wherein the first sample of frame count data is associated with a first period of time defined by the local PM frame count bin boundaries.

Abstract: In general, the disclosure describes network techniques that may automatically assign virtual local area networks (VLANs) to domains in a ring network. In one example, a method includes receiving, by a control node in a ring network, a plurality of data units transmitted by a plurality of transport nodes on the ring network, each data unit comprising profile information, and automatically assigning a VLAN to one of a plurality of domains established on the ring network based on the profile information.

Abstract: In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Abstract: In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions (“MAC collisions”) may be prevented.

Abstract: In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Abstract: Systems and methods for multicast admission control are provided. In one embodiment, a node comprises: a first interface configured to receive a multicast channel access request, from a subscriber interface, including an address for a channel; a memory including a subscriber profile and VLAN configuration data for the network; a processor that identifies a first VLAN corresponding to the address from the VLAN configuration data and determines whether the subscriber is authorized to receive the channel via the first VLAN based on access policy designated by the subscriber profile; wherein the processor further determines whether granting access to the channel violates admission control policy based on predefined bandwidth requirements and/or a stream count limit for the first VLAN; wherein when the subscriber interface is authorized to receive the channel and when granting access to the channel does not violate admission control policy, the processor routes the channel to the subscriber.

Abstract: In general, techniques are described for providing an isolation virtual local area network (VLAN) for layer two access networks. A server comprising an interface and a control unit may implement the techniques. The interface receives a message that initiates a request for a layer three (L3) network address for use by a client device via an isolation virtual local area network (VLAN) that supports transmitting data from a network device to the server, where the network device is intermediately positioned between the client device and the server. The message includes a layer two (L2) address associated with the client device. The control unit determines whether to allow the client device to access the network and assigns the L3 network address to the client device based on the determination.

Abstract: In general, techniques are described for provisioning network devices in an Ethernet-based access network. For example, an access node located in an Ethernet-based access network positioned intermediate to a back office network and a customer network may implement the techniques. The access node comprises a control unit that discovers a demarcation point device that terminates the access network of the service provider network at the customer network. The control unit of the access node implements an Ethernet protocol to provide layer two network connectivity between the service provider network and the customer network, authenticates the demarcation point device based on a unique identifier assigned to the demarcation point device and, after successfully authenticating the demarcation point device, provisions the demarcation point device.

Abstract: In general, techniques are described for applying adaptive thresholds to multicast streams within computer networks. For example, an access node may implement the techniques to facilitate efficient delivery of multicast streams. The access node comprises an interface that couples to a subscriber network having a subscriber device. The access node also includes a control unit that determines a multicast stream count reflecting current delivery of multicast streams to the subscriber network and a threshold value based on historical multicast stream counts delivered to the subscriber. The interface receives a message requesting to join a multicast group in accordance with a multicast management protocol. In response to this message, the control unit determines a projected stream count based on the above current multicast count. The control unit then compares the projected stream count to the threshold value, and admits the subscriber device to the multicast group based on the comparison.

Abstract: In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Abstract: In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Abstract: In general, the disclosure describes network techniques that may automatically assign virtual local area networks (VLANs) to domains in a ring network. In one example, a method includes receiving, by a control node in a ring network, a plurality of data units transmitted by a plurality of transport nodes on the ring network, each data unit comprising profile information, and automatically assigning a VLAN to one of a plurality of domains established on the ring network based on the profile information.