Abstract: Use of available bits in the TEID field of the GTP header to hold information needed to recreate at least a partial state of the session, enough for it to be routed, without waiting for a full state update. The GTP PDU contains the IP Payload with the source and destination IP addresses. The embodiments use that information and the coded TEID bits to provide sufficient routing information so that the packet can be routed without the full state. The TEID is coded to include bits identifying the APN and bits identifying the QCI of the session. A bit can be used to indicate drop if the full state not available. The remaining bits are used to identify unique user sessions. Some of the TEID bits can be encoded with the charging ID. Because sufficient routing information is provided in each packet, a backup gateway does not need to checkpoint.

Abstract: Use of available bits in the TEID field of the GTP header to hold information needed to recreate at least a partial state of the session, enough for it to be routed, without waiting for a full state update. The GTP PDU contains the IP Payload with the source and destination IP addresses. The embodiments use that information and the coded TEID bits to provide sufficient routing information so that the packet can be routed without the full state. The TEID is coded to include bits identifying the APN and bits identifying the QCI of the session. A bit can be used to indicate drop if the full state not available. The remaining bits are used to identify unique user sessions. Some of the TEID bits can be encoded with the charging ID. Because sufficient routing information is provided in each packet, a backup gateway does not need to checkpoint.

Abstract: A method is implemented by a computing device to automatically generate a virtual machine (VM) template to be used by a test orchestrator for creating a virtualized testing environment in which to perform a networking test. The method includes obtaining a test script from a test script repository, parsing the test script to determine a set of network devices involved in the networking test and a network connectivity among the set of network devices, and generating the VM template based on the set of network devices involved in the networking test and the network connectivity among the set of network devices, where the VM template defines a configuration of networked VMs that virtualizes the set of network devices involved in the networking test and the network connectivity among the set of network devices. A test orchestrator can administer creation of the virtualized testing environment based on the VM template.

Abstract: A method and apparatus is described for configuring a network element for providing services for subscribers by dynamically generating a set of one or more internal network attributes based on a set of relatively simple attributes passed from a server.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: A method performed in a network element coupled between a subscriber end station and an AAA server for avoiding AAA processing by at least temporarily suppressing AAA access-request messages for a rejected subscriber end station. The network element receives subscriber session-request messages from the subscriber end station. Subscriber session-request messages include information for verifying an identity that the network element transmits to the AAA server as AAA access-request messages. The network element receives AAA access-response messages corresponding to the AAA access-request messages. Responsive to an AAA access-response message, the network element determines that additional AAA access-request messages should be, at least temporarily, suppressed with regards to the subscriber end station. Responsive to determining, the network element suppresses any additional AAA access-request messages from being transmitted to the AAA server.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: A method performed in a network element coupled between a subscriber end station and an AAA server for avoiding AAA processing by at least temporarily suppressing AAA access-request messages for a rejected subscriber end station. The network element receives subscriber session-request messages from the subscriber end station. Subscriber session-request messages include information for verifying an identity that the network element transmits to the AAA server as AAA access-request messages. The network element receives AAA access-response messages corresponding to the AAA access-request messages. Responsive to an AAA access-response message, the network element determines that additional AAA access-request messages should be, at least temporarily, suppressed with regards to the subscriber end station. Responsive to determining, the network element suppresses any additional AAA access-request messages from being transmitted to the AAA server.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: A method performed in a network element coupled between a subscriber end station and an AAA server for avoiding AAA processing by at least temporarily suppressing AAA access-request messages for a rejected subscriber end station. The network element receives subscriber session-request messages from the subscriber end station. Subscriber session-request messages include information for verifying an identity that the network element transmits to the AAA server as AAA access-request messages. The network element receives AAA access-response messages corresponding to the AAA access-request messages. Responsive to an AAA access-response message, the network element determines that additional AAA access-request messages should be, at least temporarily, suppressed with regards to the subscriber end station. Responsive to determining, the network element suppresses any additional AAA access-request messages from being transmitted to the AAA server.

Abstract: An adaptive method and apparatus for accurate network traffic volume limit reporting including receiving a network traffic volume limit for each subscriber based on the subscriber's level of service and reporting the network traffic volume on a more frequent basis for subscribers who are approaching their network volume limit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: A method and apparatus is described for configuring a network element for providing services for subscribers by dynamically generating a set of one or more internal network attributes based on a set of relatively simple attributes passed from a server.

Abstract: An adaptive method and apparatus for accurate network traffic volume limit reporting including receiving a network traffic volume limit for each subscriber based on the subscriber's level of service and reporting the network traffic volume on a more frequent basis for subscribers who are approaching their network volume limit.

Abstract: A method and apparatus for performing SIM-based authentication and authorization in a WLAN Internet Service Provider (WISP) network supporting the universal access method (UAM) of authentication and authorization enabling roaming for customers of mobile service providers onto said networks. In addition, the invention provides a secure way of authenticating the customer's client device to the mobile service provider's network by employing temporary credentials for authentication that provide privacy of the user's identity and prevent replay attacks. Finally, if the WISP network supports the ‘pass-through’ facility, the authentication can be done more securely and quickly.