Abstract: Various embodiments relate to a method and apparatus for programmable and dynamic approach for end-to-end multi-domain L2/L3 service placement in telecommunications networks including defining a DSM policy by defining each of a plurality of service realms, assigning a plurality of nodes to the plurality of service realms, assigning service-type flags to each of the plurality of nodes, assigning internetworking flags to at least one of a plurality of internetworking nodes and applying the DSM policy during L2/L3 service creation. The DSM policy also can be defined to include all possible paths between any two endpoints in the context of a service.

Abstract: Various embodiments include a method for managing a group of devices in communication with each other and sharing a set of keys. The method may include opening a secure channel with each of two devices from the group; providing the set of keys to the two devices from the group, wherein the set of keys include an encryption and an authentication key; indicating to the two devices to begin using the set of keys; and performing an audit process including verifying that nodes within a key group have the same copy of encryption and authentication keys. Embodiments of the method may include synchronization, active/standby redundancy and the ability to manage the network when some nodes perform the data encryption and some node do not, do, or when both encrypted and non-encrypted tunnels and services can work together.

Abstract: Various exemplary embodiments relate to a network device configured to perform a method of configuration, the device including a memory; and a processor configured to: build an object model; create an XML-equivalent using the network element configuration file as input; create a dependency model; and perform deployment logic based on creation of the dependency model.

Abstract: Various embodiments include a method for managing a group of devices in communication with each other and sharing a set of keys. The method may include opening a secure channel with each of two devices from the group; providing the set of keys to the two devices from the group, wherein the set of keys include an encryption and an authentication key; indicating to the two devices to begin using the set of keys; and performing an audit process including verifying that nodes within a key group have the same copy of encryption and authentication keys. Embodiments of the method may include synchronization, active/standby redundancy and the ability to manage the network when some nodes perform the data encryption and some node do not, do, or when both encrypted and non-encrypted tunnels and services can work together.