Abstract: Systems, devices, and methods are discussed for leveraging SD-WAN's property of redundant independent paths to enable out of band key exchange using the collection of available paths, dynamically managing link failures to keep the separation whenever possible, and/or signaling availability of quantum-safe data transfer to SD-WAN to enable quantum-safety to be used in SD-WAN policy decisions.

Abstract: Systems, devices, and methods are discussed for leveraging SD-WAN's property of redundant independent paths to enable out of band key exchange using the collection of available paths, dynamically managing link failures to keep the separation whenever possible, and/or signaling availability of quantum-safe data transfer to SD-WAN to enable quantum-safety to be used in SD-WAN policy decisions.

Abstract: A platform is connected over a synchronous network using a GFP encapsulation scheme to a provider device having a first Ethernet interface with a customer device, said platform being arranged for exchanging tagged frames including a virtual LAN identifier (VID) with a service unit over a second Ethernet interface. If an error condition is detected at a GFP port of the platform, a correspondence is retrieved between said GFP port and a VID and a deregistration message including said VID is forwarded to the service unit. If an error condition is detected at the second Ethernet interface responsive to reception of a deregistration message including a VID from the service unit, a correspondence is retrieved between said VID and a GFP port and said deregistration message is forwarded through said GFP port to the provider device in a GFP error message. When several Ethernet interfaces concentrated by a bridge face the provider device, another VID is taken into account in the correspondence retrieving.

Abstract: Data packets are transmitted from a network device having plural network interfaces. One of the plural network interfaces is designated for receiving data packets from a source address. First and second data packets are received from a device at the source address. It is determined if the second data packet was received over a network interface on the network device other than the designated network interface. If the second data packet was received over a network interface other than the designated network interface, it is determined if the first and second data packets were received within a predetermined period of time. If the first and second data packets were received within the predetermined period of time, the second data packet is discarded. If the first and second data packets were not received within the predetermined period of time, the second data packet is transmitted from the network device and a forwarding table on the network device is updated.

Abstract: A virtual private network (VPN) service is provided through a shared network infrastructure, with customer edge (CE) devices each having a provider edge (PE) interface having a single layer 3 address in the VPN. An address resolution request message is transmitted by a first CE device on plural layer 2 virtual circuits of its PE interface. The address resolution request message including the layer 3 address allocated to a second CE device of the VPN. In response to reception of such request message at the second CE device, an address resolution response message is returned to the first CE device. In response to reception of this response message, the first CE device maps the layer 3 address allocated to the second CE device to a virtual LAN identifier of the layer 2 virtual circuit on which the response message is received.

Abstract: In one embodiment of the invention, browser plug-in includes a personal content tunnel (PCT) object processor, a PCT resolution module, and a server interface. The PCT object processor processes a PCT object returned by a content server in response to a request from a client. The PCT object contains PCT information. The PCT resolution module resolves a service uniform resource identifier (URI) using the PCT information according to a PCT resolution protocol. The service URI identifies a PCT resolution server. The server interface receives a content URI and a PCT termination point resolved by the PCT resolution server.

Abstract: A system, device, and method for allocating virtual circuits in a communication network allocates a virtual circuit for a particular device, establishes a tunnel for communicating with a second device, and maps the virtual circuit to the tunnel based upon an address resolution request received over either the virtual circuit or the tunnel. Protocol messages received over the virtual circuit are forwarded over the corresponding tunnel. Protocol messages received over the tunnal are forwarded over the corresponding virtual circuit.

Abstract: A platform is connected over a synchronous network using a GFP encapsulation scheme to a provider device having a first Ethernet interface with a customer device, said platform being arranged for exchanging tagged frames including a virtual LAN identifier (VID) with a service unit over a second Ethernet interface. If an error condition is detected at a GFP port of the platform, a correspondence is retrieved between said GFP port and a VID and a deregistration message including said VID is forwarded to the service unit. If an error condition is detected at the second Ethernet interface responsive to reception of a deregistration message including a VID from the service unit, a correspondence is retrieved between said VID and a GFP port and said deregistration message is forwarded through said GFP port to the provider device in a GFP error message. When several Ethernet interfaces concentrated by a bridge face the provider device, another VID is taken into account in the correspondence retrieving.

Abstract: A virtual private network (VPN) service is provided through a shared network infrastructure, with customer edge (CE) devices each having a provider edge (PE) interface having a single layer 3 address in the VPN. An address resolution request message is transmitted by a first CE device on plural layer 2 virtual circuits of its PE interface. The address resolution request message including the layer 3 address allocated to a second CE device of the VPN. In response to reception of such request message at the second CE device, an address resolution response message is returned to the first CE device. In response to reception of this response message, the first CE device maps the layer 3 address allocated to the second CE device to a virtual LAN identifier of the layer 2 virtual circuit on which the response message is received.