Abstract: The invention includes a method and apparatus for processing protocol messages for multiple protocol instances. In one embodiment, a method for processing protocol messages includes receiving a plurality of messages for a plurality of processors where each received message is associated with one of the protocol instances, generating a processing request for each message, queuing the processing requests, and servicing the queues in a manner for arbitrating access by the queues to the processors for processing the messages. A processing request generated for a received message identifies one of the protocol instances with which the message is associated. The processing requests are queued using a plurality of queues associated with the respective plurality of protocol instances, where each processing request is queued in one of the queues associated with the one of the protocol instances with which the processing request is associated.

Abstract: The invention includes a method and apparatus for processing protocol messages for multiple protocol instances. In one embodiment, a method for processing protocol messages includes receiving a plurality of messages for a plurality of processors where each received message is associated with one of the protocol instances, generating a processing request for each message, queuing the processing requests, and servicing the queues in a manner for arbitrating access by the queues to the processors for processing the messages. A processing request generated for a received message identifies one of the protocol instances with which the message is associated. The processing requests are queued using a plurality of queues associated with the respective plurality of protocol instances, where each processing request is queued in one of the queues associated with the one of the protocol instances with which the processing request is associated.

Abstract: System and method for performing automatic trunk formation in a multiple spanning tree protocol (“MSTP”)-enabled bridge comprising a plurality of ports are described. In one embodiment, the method comprises determining which ones of the ports comprise MSTP trunk ports; forming an MSTP trunk group for each multiple spanning tree instance (“MSTI”) comprising a group of Virtual Local Area Networks (“VLANs”) belonging to the MSTI; and, for each of the MSTP trunk ports, determining whether a status of the MSTP trunk port is trunk active and if so, adding all VLANs in the MSTP trunk group of the MSTIs that are forwarding on the MSTP trunk port as tagged members of the MSTP trunk port.

Abstract: A network device (e.g., layer 3 Ethernet switch) is described herein which interfaces with an anomaly detector that implements a type II fuzzy neural network to track symptoms of an attack (which is directed at a private network) and to suggest escalating corrective actions (which can be implemented by the network device) until the symptoms of the attack begin to disappear.

Abstract: System and method for performing automatic trunk formation in a multiple spanning tree protocol (“MSTP”)-enabled bridge comprising a plurality of ports are described. In one embodiment, the method comprises determining which ones of the ports comprise MSTP trunk ports; forming an MSTP trunk group for each multiple spanning tree instance (“MSTI”) comprising a group of Virtual Local Area Networks (“VLANs”) belonging to the MSTI; and, for each of the MSTP trunk ports, determining whether a status of the MSTP trunk port is trunk active and if so, adding all VLANs in the MSTP trunk group of the MSTIs that are forwarding on the MSTP trunk port as tagged members of the MSTP trunk port.

Abstract: A network device for distributing authentication information between authorized nodes for purposes of concurrently “pre-authenticating” a mobile user at a plurality of points throughout a LAN is disclosed. When a client attempts to access the network through the network device, the network device attempts to authenticate the client based on the credentials presented by the user. If authenticated, the client is admitted into the network at the network device and the client's pre-authentication information transmitted to one or more network nodes associated with an authentication group. Upon receipt of the pre-authentication information, the one or more network nodes are authorized to admit the client into the network at those nodes in addition to the network device at which the client was initially authenticated, thereby concurrently pre-authorizing the client at multiple points across the network.

Abstract: An L2/L3 network (e.g., Multi-protocol Label Switched (MPLS) network) having an MPLS-enabled router and a plurality of MPLS-enabled bridges is provided for implementing Label Switched Path (LSP)-enabled virtual routing. The router may be at the edge of the network and may be an Egress Label Switching Router (E-LSR). The E-LSR may also function as an LSR and/or as an ingress LSR (I-LSR) for multiple LSPs at the same time at line rate. The E-LSR may receive a packet from one of the bridges over an LSP, remove a label (e.g., MPLS label), and then route the PDU to an external network using IP (e.g., IPv4 or IPv6) protocol. In addition, the E-LSR may also receive a packet from one of the bridges over an LSP, remove a label, route or bridge the packet, apply a new label, and then label switch it to one of the VLAN bridges over an LSP. Further, the E-LSR may also receive a packet from one of the bridges over an LSP, swap labels, and then label switch it to one of the bridges over an LSP.