Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: A method carried out at a network node for managing aggregated Virtual Private Network (VPN) connection. The network node establishes an aggregated VPN connection with a network element and determines a first uplink bandwidth limit and/or a first downlink bandwidth limit. The uplink bandwidth at the network node is limited to the first uplink bandwidth limit if the first uplink bandwidth limit is determined. The downlink bandwidth at the network node is limited to the first downlink bandwidth limit if the first downlink bandwidth limit is determined. The network node encapsulates first data packets in first encapsulating packets and then transmits the first encapsulating packets to the network element through the aggregated VPN connection within the first uplink bandwidth limit. The network node receives second encapsulating packets from the network element within the first downlink bandwidth limit, and then decapsulates second data packets from the second encapsulating packets.

Abstract: A method and a system for creating Internet Protocol address based network policy by using domain name based network policies is disclosed. The domain name based network policies are stored. When a network device receives an record Domain Name System look-up reply, the network device identifies one or more Interact Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply, then determine whether the one or more host names contain a domain name used in one or more domain name based network policies and create one or more Internet Protocol address based network policies.

Abstract: The method and apparatus of the present invention concern the enablement and disablement of at least one identifier of a network device, which is capable of allowing connecting to a plurality of wide area network (WAN) connections through at least one wireless local area (WLAN) network connection. When a first WAN network connection does not meet at least one condition, the at least one corresponding identifier of said first WAN network connection are disabled and other identifiers not corresponding to said first WAN network connection are not affected. When first WAN network connection meets all said conditions again, said at least one corresponding identifier of said first WAN network connection are enabled again.

Abstract: Methods and systems for transmitting and receiving data between a first node and a second node through a first tunnel group and a second tunnel group respectively. The first node transmits data to the second node mainly through a first tunnel group and receives data from the second node mainly through a second tunnel group. In some embodiments, the first node receives first IP packets from one of its LAN interfaces and then transmits encapsulated first IP packets and then are transmitted mainly through a first one or more WAN interfaces to the second node. The first node receives encapsulated second IP packets mainly from the second node through a second one or more of its WAN interfaces. Second IP packets are then de-capsulated and transmitted through one of the LAN interfaces of the first node.

Abstract: The present invention discloses methods and systems for recreating missing data packets of a data session established between a first communications router and a second communications router through an aggregated connection. The first communications router receives data packets belonging to a data session from the second communications router through the aggregated connection. The data packets are destined to a first host reachable through the first communications router. The first communications router transmits the data packets to the first host and determines whether there is one or more missing data packets. If there is one or more missing data packets, the first communications router determines global sequence number(s) (GSN) and per tunnel sequence numbers (PTSN) of the one or more missing data packets and recreates payload(s) of the one or more missing data packet(s). One or more new data packets are then transmitted to the first host.

Abstract: A method and system for choosing at least one network interface among a plurality of network interfaces to send and receive information data by determining performance data for a plurality of network interface groups. A network interface group comprises one or more network interfaces of a network device. Performance data of a network interface group is determined by sending testing data through at least one network interface comprised in the network interface group. Performance data may be based on a report received from a test server to which the testing data was sent. Performance data is determined according to one or more performance metrics such as a CPU usage metric, a memory usage metric, a response time metric, a packet delay metric, a packet latency metric, a bandwidth metric, a throughput metric, packet loss, packet drop, a power consumption metric, or a signal to noise ratio (SNR) metric.

Abstract: A network system and method regarding data flow transmission, including: a first network connection interface interconnecting with a transmitter; at least two second network connection interfaces interconnecting with a receiver through at least two access networks; and a control unit, used for receiving packets of a data flow from the transmitter by the first network connection interface, selecting an access network from the access networks connecting to the at least two second network connection interfaces to send the packets embedded with the packets of the data flow to the receiver, determining whether to generate at least one nominal reception acknowledgement message corresponding to the packets of the data flow, generating the nominal reception acknowledgement message on behalf receiver if it is determined to generate the nominal reception acknowledgement message, and sending the nominal reception acknowledgement message to the transmitter; and at least one storage medium.

Abstract: The method and apparatus of the present invention concern the enablement and disablement of at least one identifier of a network device, which is capable of allowing connecting to a plurality of wide area network (WAN) connections through at least one wireless local area (WLAN) network connection. When a first WAN network connection does not meet at least one condition, the at least one corresponding identifier of said first WAN network connection are disabled and other identifiers not corresponding to said first WAN network connection are not affected. When first WAN network connection meets all said conditions again, said at least one corresponding identifier of said first WAN network connection are enabled again.

Abstract: The present disclosure provides for devices, systems, and methods which optimize throughput of bonded connections over multiple variable bandwidth logical paths by adjusting a tunnel bandwidth weighting schema during a data transfer session in response to a change in bandwidth capabilities of one or more tunnels. By making such adjustments, embodiments of the present invention are able to optimize the bandwidth potential of multiple connections being used in a session, while minimizing the adverse consequences of reduced bandwidth issues which may occur during the data transfer session.

Abstract: Methods and systems for processing Domain Name Service (DNS) request in a gateway with a plurality of WAN network interfaces. After receiving a first DNS request via one of network interfaces of the gateway, the gateway selects at least one DNS server and at least one access network and then transmits a plurality of new DNS requests to the selected at least one DNS server through the selected at least one access network and via one of network interfaces of the gateway.

Abstract: A method and device for allowing users to manage policy(s) of the device through a manual information input module. The manual information input module is a physical interface which allows manipulation of the policy(s). The manual information input may include, but not limited to, a button a knob, a display panel, etc. Policy(s) are assigned to the manual information input module and the assigned policy(s) are executed by interacting with the manual information input module. The policy(s) of the device are stored in the computer readable storage medium and the policy(s) associated with the manual information input module are retrieved by the processor of the device from the computer readable storage medium of the device in order to execute the policy(s).

Abstract: Method and system for reduction of time variance of packets received from bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, X.25 and etc. The present invention presents methods comprising the steps of determining latency difference among bonded communication links, receiving one or more packets from the bonded communication links, and delivering the one or more packets according to the latency difference.