Abstract: A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

Abstract: A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

Abstract: A method including receiving, by a server from a mobile device, an identifier of a network device to be installed in a network and a location information associated with the network device, is provided. The mobile device is located near the network device that is remote to the server, and the method includes determining, by the server, an installation configuration for the network device, and providing, by the server, the installation configuration for the network device to the mobile device.

Abstract: An apparatus for VPN fast convergence in MPLS networks is disclosed. The apparatus comprises a first memory portion, a second memory portion, and a first logic for programming the memory portions. The first memory portion comprises a plurality of first data structures, where each of the plurality of first data structures includes an IGP label and an adjacency identifier that identifies one of a plurality of outgoing interfaces associated with the apparatus, where each IGP label indicates a Label Switched Path (LSP) through a network. The second memory portion comprises a plurality of second data structures, where each of the plurality of second data structures includes a network address identifier, a VPN label associated with the network address identifier, and a pointer that indicates one of the plurality of first data structures in the first memory portion, where each VPN label identifies a VPN that is reachable over the network.

Abstract: An apparatus for VPN fast convergence in MPLS networks is disclosed. The apparatus comprises a first memory portion, a second memory portion, and a first logic for programming the memory portions. The first memory portion comprises a plurality of first data structures, where each of the plurality of first data structures includes an IGP label and an adjacency identifier that identifies one of a plurality of outgoing interfaces associated with the apparatus, where each IGP label indicates a Label Switched Path (LSP) through a network. The second memory portion comprises a plurality of second data structures, where each of the plurality of second data structures includes a network address identifier, a VPN label associated with the network address identifier, and a pointer that indicates one of the plurality of first data structures in the first memory portion, where each VPN label identifies a VPN that is reachable over the network.