Abstract: A provider edge (PE) device provides subscribers with access to an Internet Service Provider (ISP) network. The subscribers are connected to the PE device via a broadband aggregation device. The PE device includes a processor operable to snoop control plane traffic for a logical identifier that allows subscriber traffic having varying data plane information to be treated as a session group. The processor is further operable to instantiate the session group based on the logical identifier. A unit of the PE device applies a QOS policy to traffic flow associated with the session group. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: A customer edge device is automatically configured. A request for customer edge device configuration data may be transmitted to a provider edge device via an Ethernet-layer operations, administration, maintenance, and provisioning (OAM&P) protocol. The request for configuration data may be relayed from the Ethernet-layer OAM&P protocol to a configuration protocol. The request for configuration data may be transmitted from the provider edge device to a configuration repository server via the configuration protocol. The configuration repository server may transmit the requested configuration data to the provider edge device via the configuration protocol. The provider edge device may relay the configuration data from the configuration protocol to the Ethernet-layer OAM&P protocol and transmit the configuration data to a customer edge device via the Ethernet-layer OAM&P protocol. The customer edge device may automatically configure itself using the configuration data.

Abstract: In an example embodiment, a method is provided to receive a request message. A client that transmitted the request message then is identified. Here, the client is associated with a client identifier. The client identifier is inserted into a response message, and this response message includes a redirect to a portal. The response message then is transmitted.

Abstract: A service gateway maintains forwarding components operative to forward data packets within corresponding VPNs, and also maintains subscriber sessions for subscribers via respective subscriber interfaces. The association between the subscribers and the forwarding components is independent of the subscriber interfaces, such that the subscribers reachable via a given interface are associable with any forwarding component. Upon detecting an appropriate event, such as a service selection action, the service gateway modifies the forwarding components of first and second VPNs to reflect that the subscriber session is active in the second VPN and is not active in the first VPN. The service gateway also effects a change of a network address that identifies the corresponding subscriber from a first network address defined in the first VPN to a second network address defined in the second VPN. Mechanisms for effecting such a change of network address include DHCP, IPCP, RADIUS, and NAT.

Abstract: A service chain system is provided. The system includes a packet of data that is operable to pass through a network of service nodes as defined by a service chain; and a service classification device that is operable to change the service chain based on a system performance.

Abstract: A method involving receiving, at a network device, a first layer 2 network packet from a client, the first layer 2 network packet encapsulating a layer 3 network packet; forwarding the first layer 2 network packet to a server by associating the layer 3 destination host with a particular server connected to the network device, creating a modified first layer 2 network packet by overwriting the layer 2 destination address of the first layer 2 network packet with the layer 2 network address of the server, and sending the modified first layer 2 network packet over a network; receiving, at the network device, a second layer 2 network packet from the server; and forwarding the second layer 2 network packet to the client by creating a modified second layer 2 network packet by overwriting the layer 2 source address of the second layer 2 network packet with the layer 2 network address of the network device and sending the modified second layer 2 network packet over a network.

Abstract: A customer edge device is automatically configured. A request for customer edge device configuration data may be transmitted to a provider edge device via an Ethernet-layer operations, administration, maintenance, and provisioning (OAM&P) protocol. The request for configuration data may be relayed from the Ethernet-layer OAM&P protocol to a configuration protocol. The request for configuration data may be transmitted from the provider edge device to a configuration repository server via the configuration protocol. The configuration repository server may transmit the requested configuration data to the provider edge device via the configuration protocol. The provider edge device may relay the configuration data from the configuration protocol to the Ethernet-layer OAM&P protocol and transmit the configuration data to a customer edge device via the Ethernet-layer OAM&P protocol. The customer edge device may automatically configure itself using the configuration data.

Abstract: An edge router termed a “service gateway” operates to reassign network addresses such as Internet Protocol (IP) addresses to a subscriber, such as when the subscriber is to be transitioned from a first virtual private network (VPN) to a second VPN. The service gateway obtains a new network address routable in a second VPN and applies dynamic edge network address translation (NAT) on an interim basis to provide instant access to the second VPN (following web-based identification for example), while a prior lease for an initial network address not routable in the second VPN is still in effect. When the subscriber attempts to renew the lease in due course, the renewal request is rejected, which forces the subscriber to re-initiate dynamic host control protocol (DHCP) procedures to obtain a new network address. At this point, the interim NAT mapping is removed and the new network address is assigned directly to the subscriber via DHCP.

Abstract: A method is disclosed for authorizing a prepaid network service in a data network. A network end station issues a request for a prepaid network service. At a network node, such as a router serving as a gateway for selecting services, a determination is made about whether a user associated with the end station is authorized to access the prepaid network service. Network traffic from the end station is forwarded to a service provider only when the user is authorized to use the prepaid network service. Specific embodiments provide message flows among a mobile station, gateway support node, router, and authentication server that support providing prepaid services in a packet-switched network for mobile communication. In certain embodiments, a connection is held open for an end station while a prepaid quota value is refreshed at a portal, thereby reducing overhead and precluding the need to repeat user logon steps.

Abstract: A service chain system is provided. The system includes a packet of data that is operable to pass through a network of service nodes as defined by a service chain; and a service classification device that is operable to change the service chain based on a system performance.

Abstract: In an example embodiment, a method is provided to receive a request message. A client that transmitted the request message then is identified. Here, the client is associated with a client identifier. The client identifier is inserted into a response message, and this response message includes a redirect to a portal. The response message then is transmitted.

Abstract: A method involving receiving, at a network device, a first layer 2 network packet from a client, the first layer 2 network packet encapsulating a layer 3 network packet; forwarding the first layer 2 network packet to a server by associating the layer 3 destination host with a particular server connected to the network device, creating a modified first layer 2 network packet by overwriting the layer 2 destination address of the first layer 2 network packet with the layer 2 network address of the server, and sending the modified first layer 2 network packet over a network; receiving, at the network device, a second layer 2 network packet from the server; and forwarding the second layer 2 network packet to the client by creating a modified second layer 2 network packet by overwriting the layer 2 source address of the second layer 2 network packet with the layer 2 network address of the network device and sending the modified second layer 2 network packet over a network.

Abstract: A community translation service device for providing a translation service to a community of at least one source device is arranged to receive data traffic from a source device in the community. The traffic includes a native data session identifier and, as a source identifier, a source device identifier. The community translation service device comprises a translation component and a database for storing a pool of assigned data session identifiers associated with said source device. The translation component is arranged to translate said native data session identifier to an assigned data session identifier associated with the source device, said community translation service device further being arranged to forward said data traffic including said assigned data session identifier as data session source device information to a service aggregation device.

Abstract: A method is disclosed for authorizing a prepaid network service in a data network. A network end station issues a request for a prepaid network service. At a network node, such as a router serving as a gateway for selecting services, a determination is made about whether a user associated with the end station is authorized to access the prepaid network service. Network traffic from the end station is forwarded to a service provider only when the user is authorized to use the prepaid network service. Specific embodiments provide message flows among a mobile station, gateway support node, router, and authentication server that support providing prepaid services in a packet-switched network for mobile communication. In certain embodiments, a connection is held open for an end station while a prepaid quota value is refreshed at a portal, thereby reducing overhead and precluding the need to repeat user logon steps.