Abstract: A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network.

Abstract: A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network.

Abstract: A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network.

Abstract: A method and apparatus for optimizing multicast traffic in a VLAN-tagged environment is disclosed. The method, implemented by a cross-VLAN switching device, comprises the steps of receiving a multicast stream within a first VLAN of a plurality of VLANs configured thereon, and internally distributing the multicast stream towards substantially all the multicast group members registered at the cross-VLAN switching device to receive the multicast stream. Distribution of the multicast stream preferably comprises the steps of internally routing the multicast stream from the first VLAN to each VLAN in which there is a multicast group member registered to receive the multicast stream and then switching the multicast stream from each VLAN in which it is present in a cross-VLAN switching device to substantially all of the multicast group members registered to receive the multicast stream.

Abstract: A switch and a method are described herein that are capable of performing the following steps: (a) receiving the unicast packet which is a L3 routed packet at a port in a first Virtual Local Area Network (VLAN); (b) routing the received packet to a loopback port in a second VLAN; (c) receiving the routed packet which is now a L2 multicast packet from the loopback port in the second VLAN; and (d) bridging the routed packet to multiple ports in the second VLAN.

Abstract: A method and apparatus for optimizing multicast traffic in a VLAN-tagged environment is disclosed. The method, implemented by a cross-VLAN switching device, comprises the steps of receiving a multicast stream within a first VLAN of a plurality of VLANs configured thereon, and internally distributing the multicast stream towards substantially all the multicast group members registered at the cross-VLAN switching device to receive the multicast stream. Distribution of the multicast stream preferably comprises the steps of internally routing the multicast stream from the first VLAN to each VLAN in which there is a multicast group member registered to receive the multicast stream and then switching the multicast stream from each VLAN in which it is present in a cross-VLAN switching device to substantially all of the multicast group members registered to receive the multicast stream.

Abstract: Method and apparatus for classifying querying nodes. A querying node is classified as a multicast router if it transmits a multicast routing protocol query message and the node is either unclassified or classified as a multicast querier. The node is classified as a multicast querier if it transmits a multicast group query message and the node is unclassified. IGMP multicast group membership reports are transmitted to both multicast queriers and multicast routers. IP multicast routing protocol data packets, however, are transmitted to only multicast routers.