Abstract: A technique for authenticating network users is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for authenticating network users. The method may comprise receiving, from a client device, a request for connection to a network. The method may also comprise evaluating a security context associated with the requested connection. The method may further comprise assigning the client device one or more access privileges based at least in part on the evaluation of the security context.

Abstract: Embodiments of the present invention present a method and apparatus for photonic line sharing for high-speed routers. Photonic switches receive high-speed optical data streams and produce the data streams to a router operating according to routing logic and produce optical data streams according to destination addresses stored in the data packets. Each photonic switch can be configured as one of a 1:N multiplexer or an M:N cross-connect switch. In one embodiment, optical data is converted to electrical data prior to routing, while an alternate embodiment routes only optical data. Another embodiment transfers large volumes of high-speed data through an optical bypass line in a circuit switched network to bypass the switch fabric thereby routing the data packets directly to the destination. An edge device selects one of the packet switched network or the circuit switched network. The bypass resources are released when the large volume of high-speed data is transferred.

Abstract: Automatic discovery and verification of optical communication links as well as isolation of link failures in an optical communication system.

Abstract: A technique for providing secure network access is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for providing secure network access. The method may comprise establishing a plurality of access zones in a network, wherein client devices assigned to different access zones have different access privileges and are isolated from one another. The method may also comprise assigning a client device to one of the plurality of access zones based on an assessment of a security context associated with the client device and a connection of the client device to the network.

Abstract: A method and an apparatus that reduce the burden on routers by removing the aggregation and physical Wide Area Network (WAN) interface functions from the router are provided. The aggregation and physical Wide Area Network interface transparently forwards traffic and routing information to and from the WAN without becoming a router. The disclosed forwarding technique and apparatus is applicable to IP protocol as well as other protocols. As provided, the routing device is connected to a forwarding device via the Local Area Network (LAN) and the IP Multiplexer forwards data packets to one or more physical WAN links.

Abstract: A technique for authenticating network users is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for authenticating network users. The method may comprise receiving, from a client device, a request for connection to a network. The method may also comprise evaluating a security context associated with the requested connection. The method may further comprise assigning the client device one or more access privileges based at least in part on the evaluation of the security context.

Abstract: A technique for providing secure network access is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for providing secure network access. The method may comprise establishing a plurality of access zones in a network, wherein client devices assigned to different access zones have different access privileges and are isolated from one another. The method may also comprise assigning a client device to one of the plurality of access zones based on an assessment of a security context associated with the client device and a connection of the client device to the network.

Abstract: Automatic discovery and verification of optical communication links as well as isolation of link failures in an optical communication system.

Abstract: A method and an apparatus that reduce the burden on routers by removing the aggregation and physical Wide Area Network (WAN) interface functions from the router are provided. The aggregation and physical Wide Area Network interface transparently forwards traffic and routing information to and from the WAN without becoming a router. The disclosed forwarding technique and apparatus is applicable to IP protocol as well as other protocols. As provided, the routing device is connected to a forwarding device via the Local Area Network (LAN) and the IP Multiplexer forwards data packets to one or more physical WAN links.