Abstract: Systems and methods for improving network element security. The methods comprise: obtaining a transport frame by the network element; analyzing, by the network element, the transport frame to determine whether or not any vulnerable overhead field values in at least one of a header of a mapping layer frame and a header of a transport layer frame have values other than expected values; modifying, by the network element, at least one reserved target field value in the transport frame when a determination is made that the at least one vulnerable overhead field value has a value other than the expected value; and communicating, by the network element, the transport frame with the modified at least one reserved target value over a network.

Abstract: A system (706, 714) is provided for a network signaling bypass around a cryptographic device (1008, 1108). The system is comprised of an interface (1002, 1102) configured to receive a plurality of packets and communicate the packets that are of a non-GIST type to a non-GIST bypass circuit (1004-1, 1004-2) and the packets that are of a GIST type to a GIST bypass circuit (1006-1, 1006-2). The non-GIST bypass circuit is configured to selectively bypass a first packet around the cryptographic device to an output device (1010, 1110, 1012, 1112) if the first packet comprises signaling protocol data for a network (710) over which the first packet is communicated. The GIST bypass circuit is configured to selectively bypass a second packet around the cryptographic device to the output device if the second packet comprises GIST signaling transport protocol data for the network over which the second packet is communicated.

Abstract: A system (104) is provided for filling a SONET SPE (204, 300, 500, 600, 700) with bytes of digital information. The system is comprised of data input ports (1-6) configured to receive payload signals comprised of payload information. The system is also comprised of data processing circuits configured to transfer bytes of payload information in sequence from the payload signals. The data processing circuits are also configured to break the payload information into byte segments. The data processing circuits are further configured to map the byte segments to the SONET SPE in a byte by byte manner. The SONET SPE is comprised of cells. The cells are filled from top to bottom in a manner proceeding row by row, from left to right in each row. A method for filling the SONET SPE with bytes of digital information corresponding to payload signals is also provided.

Abstract: A system (706, 714) is provided for a network signaling protocol bypass around a cryptographic device (1006, 1106). The system is comprised of a bypass means for receiving a packet (900) having a transport layer protocol header (908), for parsing a GIST signaling transport protocol identifier (950) from the transport layer protocol header, and for determining whether the GIST signaling transport protocol identifier is a NTLP or a NSIS signaling transport protocol identifier. If the GIST signaling transport protocol identifier is a NTLP or a NSIS signaling transport protocol identifier, the packet is bypassed around the cryptographic device. However, if the GIST signaling transport protocol identifier is not a NTLP or NSIS signaling transport protocol identifier, the packet is forwarded to the cryptographic device. A method is also provided for a network signaling protocol bypass around the cryptographic device.

Abstract: A system (706, 714) is provided for a network signaling protocol bypass around a cryptographic device (1008, 1108). The system is comprised of a first bypass device (1004-1, 1004-2) configured to parse a GIST signaling transport protocol identifier (960) from a transport layer protocol header (906) of a packet (900). The first bypass device is also configured to communicate the packet to a second bypass device (1006-1, 1006-2) if the GIST signaling transport protocol identifier is a NTLP or NSIS signaling transport protocol identifier. The second bypass device is configured to parse a NSLP protocol identifier (970) from a NSLP layer protocol header (910). The second bypass device is also configured to determine whether the NSLP protocol identifier is equal to a predetermined NSLP protocol identifier. If the NSLP protocol identifier is not equal to the predetermined NSLP protocol identifier, then the packet may be bypassed around the cryptographic device.

Abstract: Systems and methods for use in a synchronous network in which the line data communications channel and section data communications channel are combined to provide an increased bandwidth data communication channel. In one aspect of the invention, all of the bytes of the line data communications channel are combined with the bytes of the sections data communications channel to create a single data communications channel. In another aspect, some but not all of the line data communications channel bytes are moved to the sections data communications channel in order to create an increased capacity section data communications channel.

Abstract: Methods and apparatus for assigning and/or storing routing metric values for routing traffic in a network having line terminating equipment connected by an line data communications channel (LDCC), so that routing traffic is sent across the LDCC. These methods and systems include a node and network that use the LDCC for transmitting routing information, such as Intermediate System to Intermediate System Level 2 routing traffic.