Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.

Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Service groups are dynamically created and members are dynamically assigned. A network element receives a request for a subscriber session and transmits an authentication request to a AAA server. The network element receives an authentication reply from the AAA server that includes dynamic service group configuration information that indicates that the subscriber session should be part of a service group and defines the criteria for the network element to dynamically create and join that subscriber session to a service group if an appropriate service group does not exist or dynamically join that subscriber session to an existing service group. The network element derives a dynamic service group identifier from attributes of the subscriber session based on instructions in the dynamic service group configuration information.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Abstract: Service groups are dynamically created and members are dynamically assigned. A network element receives a request for a subscriber session and transmits an authentication request to a AAA server. The network element receives an authentication reply from the AAA server that includes dynamic service group configuration information that indicates that the subscriber session should be part of a service group and defines the criteria for the network element to dynamically create and join that subscriber session to a service group if an appropriate service group does not exist or dynamically join that subscriber session to an existing service group. The network element derives a dynamic service group identifier from attributes of the subscriber session based on instructions in the dynamic service group configuration information.

Abstract: Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.