Abstract: A system for monitoring a user and coordinating one or more alert response by one or more first responders and configured to connect to one or more monitoring devices. The system includes a mobile device configured to perform operations. The operations include obtain user data from a continuous user data stream from the one or more monitoring devices, determine, based on the user data stream and user historical records, a safe zone of the user, and determine, based on a user data stream and user historical records, whether a current state or a predicted state of the user is within the safe zone and/or a danger zone defined as being outside the safe zone.

Abstract: A snapshot of a computer network system is taken in a virtualized environment. During a recording phase, a network message is recorded as it enters the computer network system. A logger generates log data that includes the headers of the network message as it enters and exits each server in the computer network system. An analysis server automatically analyzes the log data and determines whether there was a modification to a header of a network message and where the modification occurred. The contents of the changes reflected in the log data indicates functionality of the servers in the computer network system. The analysis server determines the dependencies between servers in the computer network system. The recorded data is used for test replays.

Abstract: Provided is a method and apparatus for searching for a Maintenance End Point (MEP), and a storage medium. The method includes that: a chip of the MEP parses an obtained packet; the chip of the MEP determines whether a field of the parsed packet matches a field in a combination of a port and a Virtual Local Area Network (VLAN); and in a case where the field of the parsed packet matches the field in the combination of the port and the VLAN, the chip of the MEP determines that the MEP is found successfully.

Abstract: A method includes determining a set of test locations based on a network parameter; and determining a subset of the test locations that do not have a point test equipment. The method includes determining a drive test route to cover an area serviced by each the subset of the test locations. The method includes receiving a notification from a drive test equipment in response to the drive test equipment arriving at a first test location on the drive test route. The method includes sending test parameters to the drive test equipment; and receiving a drive test result from the drive test equipment. The method includes determining whether the drive test results meet a drive test specification. The method includes requesting the drive test equipment to relocate to a second test location in response to a determination that the drive test results meet the drive test specification.

Abstract: Distributed system resources may be managed by applying user created policies to the resources. To ensure that valid policies are applied, remote validation for the policies may be implemented. A validation event for a policy may be detected. A remote validation agent may be identified for the policy and a validation request sent to the remote validation agent that includes information for validating the policy. The remote validation agent may return a validation result for the policy. If valid, a policy action that triggered the remote validation event for the policy may be allowed. If invalid, the policy action that triggered the remote validation event for the policy may be denied.

Abstract: A data transmission method for use between a wireless transmitter and a wireless receiver of a wireless peripheral device is provided. In a frequency hopping procedure, the wireless transmission data is re-transmitted through a secondary transmission channel. Consequently, a transmission delay problem is reduced. Moreover, the wireless receiver issues a special acknowledgement packet with loadable information to the wireless transmitter. Consequently, the master control power of the frequency hopping procedure is switched from the wireless transmitter to the wireless receiver. In addition, the information control capability of the wireless receiver to control the wireless transmitter in the communication application level can be increased.

Abstract: Example methods and systems for packet handling in a software-defined networking (SDN) environment are disclosed. One example method may comprise detecting an egress application-layer message from a first logical endpoint supported by a first host; and identifying a second logical endpoint supported by the second host for which the egress application-layer message is destined. The method may also comprise generating an egress packet that includes the egress application-layer message and metadata associated with the second logical endpoint, but omits one or more headers that are addressed from the first logical endpoint to the second logical endpoint. The method may further comprise sending the egress packet to the second host to cause the second host to identify the second logical endpoint based on the metadata, and to send the egress application-layer message to the second logical endpoint.

Abstract: Systems and methods are provided for performing burst packet preloading for Available Bandwidth (ABW) estimation, that may include: preparing a chirp train to be used for ABW estimation, the chirp train comprising a quantity of original probe packets; determining a quantity of additional probe packets that will transition the network path from a short-term mode into a long-term mode; inserting the determined quantity of additional probe packets at the beginning of the chirp train; and transmitting the chirp train, including the determined quantity of additional probe packets on the network path, to a receiver that can perform ABW estimation of the network path.

Abstract: The present disclosure provides an object distribution processing method, device, and system. The object distribution processing method includes: receiving, by an object distribution server, content of an object distribution transaction from a blockchain node, where the content of an object distribution transaction includes a transaction hash specific to the object information to be distributed; after the object distribution server reaches a distribution start time, receiving object distribution requests from a plurality of clients; determining a corresponding award winner from a plurality of object distribution requests; and sending an object distribution message with the hash value to the award winner. With this method, the tamper-resistant characteristic of transaction content in a blockchain is used, and a proof for a transaction hash value specific to initial object information is provided for a user, thereby improving fairness of an object distribution service.

Abstract: Some embodiments provide a method for generating a test traffic configuration for testing a first network. From a second network, the method receives a set of data streams representing data traffic observed in the second network. The method uses a machine learning engine to analyze the set of data streams in order to determine traffic patterns in the second network. The method generates the test traffic configuration for testing the first network by replicating the traffic patterns of the second network in the first network.

Abstract: The technology disclosed is a method of testing handling of secure communication sessions of clients with servers by device or system under test (DUT). The method includes (i) establishing a secure communication session between the client and the server while the client and the server transitions past a standards-required verification step or validation step without performing the required verification or validation, (ii) establishing a secure communication session between the client and the server while the client and the server reuse standards-required security mechanisms without generating or obtaining new standards-required security mechanisms, or (iii) establishing a secure communication session between the client and the server while the client and the server generate and transmit content contrary to an established standard-based procedure that poses certain requirements of the content.

Abstract: A method, system and computer-readable medium where a weighted composite quality index having a plurality of components for a network element is identified. A historical baseline value from historical data for each component is determined, and a deviation from the historical baseline values is measured. A risk level for the deviation is assigned. A loss score for the measured components is computed by mapping the risk level to a numerical score. An aggregated risk score based on a sum of weighted risk scores for each of the components is computed. An expected risk score based on probabilities associated with the aggregated risk score is determined by computing future probabilities of each risk level at the network element based on a trained machine learning model.

Abstract: The present invention provides an asymmetric duplex transmission device and a switching system employing the same. The master device and the slave device communicate with each other through a single clock and full duplex data channels. It can also switch the duplex data channels between a plurality of slave devices under limited resources.

Abstract: Systems, methods, and computer-readable media for generating counterexamples for equivalence failures between models of network intents. A listing of conflict rules corresponding to an equivalence failure between at least first and seconds model of networks intents describing the operation and communication of network devices in a network is obtained. A logical exclusive disjunction between first conflict rules from the first model and corresponding second conflict rules from the second model is calculated. One or more counterexamples corresponding to the equivalence failure are generated based at least in part on the logical exclusive disjunction, such that a given counterexample comprises network and packet conditions that cause the first conflict rules to trigger a first action and cause the second conflict rules to trigger a second action that is different from the first action. Hot fields that are more likely to be associated with the equivalence failure are identified in the counterexample.

Abstract: A new processing architecture is described in which a data processing unit (DPU) is utilized within a device. Unlike conventional compute models that are centered around a central processing unit (CPU), example implementations described herein leverage a DPU that is specially designed and optimized for a data-centric computing model in which the data processing tasks are centered around, and the primary responsibility of, the DPU. For example, various data processing tasks, such as networking, security, and storage, as well as related work acceleration, distribution and scheduling, and other such tasks are the domain of the DPU. The DPU may be viewed as a highly programmable, high-performance input/output (I/O) and data-processing hub designed to aggregate and process network and storage I/O to and from multiple other components and/or devices. This frees resources of the CPU, if present, for computing-intensive tasks.

Abstract: Diagnostic test results are obtained in respect of local area networks (LANs), the LANs having user-devices located therein having interfaces and being operable to communicate via those interfaces and via a LAN gateway device with remote devices in a communications network outside their respective LANs. A method comprises comparing performance measures obtained in respect of communication flows with a performance threshold whereby to identify communication flows whose performance measures are indicative of performance below a predetermined level, and for any such communication flows, obtaining a diagnosis in respect of the LAN in question in dependence on a comparison of the performance measure obtained in respect of the identified communication flow and performance measures obtained in respect of other communication flows, the diagnosis being obtained in dependence on respective portability levels and network interface types determined in respect of the user-devices involved in said communication flows.

Abstract: An embodiment of the present invention provides a method for supporting non-access stratum (NAS) signaling of a user equipment (UE) by a base station in a wireless communication system, the method comprising the steps of: transmitting, to the UE, information for supporting a connection to a next generation (NG) core; receiving a NAS-related message from the UE; performing one of MME selection and AMF selection according to whether the NAS-related message includes information regarding the use of NAS; and transmitting an NAS message to an MMF or an AMF which is determined as a result of performing one of the MME selection and the AMF selection.

Abstract: Systems and methods described herein provide a centralized solution for interference mitigation that focuses on efficient spectrum management. Wireless Access Points (APs) collect interference measurements for wireless channels and generate corresponding interferer airtime estimates. The APs also determine Packet Error Rates (PERs) for wireless client devices currently being served via the channels by the APs. The APs send the interferer airtime measurements and the PERs to a centralized controller. If an interferer airtime estimate and a PER for a particular channel satisfy predefined threshold conditions, the controller modifies an allocation of wireless bandwidth for an AP that is currently using the channel and sends a message to the AP indicating how the allocation has been modified.

Abstract: Various systems and methods for determining and communicating Link Performance Predictions (LPPs), such as in connection with management of radio communication links, are discussed herein. The LPPs are predictions of future network behaviors/metrics (e.g., bandwidth, latency, capacity, coverage holes, etc.). The LPPs are communicated to applications and/or network infrastructure, which allows the applications/infrastructure to make operational decisions for improved signaling/link resource utilization. In embodiments, the link performance analysis is divided into multiple layers that determine their own link performance metrics, which are then fused together to make an LPP. Each layer runs different algorithms, and provides respective results to an LPP layer/engine that fuses the results together to obtain the LPP. Other embodiments are described and/or claimed.

Abstract: In one embodiment, a device identifies one or more telemetry data variables for use to predict failure of a tunnel in a software-defined wide area network (SD-WAN). The device sends a Bidirectional Forwarding Detection (BFD)-based telemetry request towards a tail-end router of the tunnel that requests the one or more telemetry data variables. The device receives the requested one or more telemetry data variables. The device uses the received one or more telemetry data variables as input to a machine learning-based model, to predict a failure of the tunnel.

Abstract: A controller, in a software-defined networking control layer, may determine auto-discovery parameters and may use the auto-discovery parameters to identify a first set of forwarding boxes within a network. The controller may identify a second set of forwarding boxes within the network that communicate with or are otherwise coupled to the first set of forwarding boxes. The controller may forward requests to the first and second sets of forwarding boxes to control traffic exchanged via the first and second sets of forwarding box. A third set of forwarding boxes located outside the network may request admissions into the software defined network, and requests from the third set of forwarding boxes may be forwarded to the controller via the first or second sets of forwarding boxes. The controller may authenticate the second and the third sets of forwarding boxes based on their relationship to the first set of forwarding boxes.

Abstract: A method for monitoring data exchange over a network of the H link type implementing a technology of the TDMA type includes transmitting a monitoring agent from a remote server to a communication server, installing the monitoring agent on the communication server, launching the monitoring agent on the communication server, the monitoring agent implementing an interface for receiving and for transmitting data designed and arranged to receive the data received by the communication server and transmit the data received by the monitoring agent to the remote server, transmitting the data received by the monitoring agent to the remote server, the transmission of the data received being carried out by the monitoring agent.

Abstract: A packet forwarding network may include switches that forward network packets between end hosts. A monitoring network may be coupled to the forwarding network. A controller may control switches in the monitoring network to forward network packets tapped from the forwarding network to network flow information generation circuitry. The controller may provide configuration information such as record description information to the network flow information generation circuitry. Based on the configuration information, the network flow information generation circuitry may dynamically generate instructions that generate network flow information records. A set of network flow information records may be stored in a repository at the network flow information generation circuitry. The repository may include hash values associated with each of the stored network flow information records.

Abstract: A mobility management entity (MME) can enable overload control of data transmission via control plane in an evolved packet system (EPS), optimized for cellular internet of things (CIoT), by use of a control plane data backoff timer that suppresses the use of control plane for data transfer by a user equipment (UE) for the duration of the timer. For example, an MME sends a control plane data backoff timer to a UE that suppresses the use of control plane for data transfer for the duration of the timer. Alternatively, when an MME load reaches a threshold, an MME triggers an Overload Start message and sends it to the RAN node, so that the RAN node can restrict selecting this MME for UEs requiring data transfer using control plane CIoT optimization. The RAN node can reject these UEs and return a wait timer in an RRC Connection Release message.

Abstract: The “free world replication protocol” makes use of client computing resources, wherein the clients are not part of the replicated key-value store, but instead reside in the “free world” outside of the dedicated resources of the nodes of the replicated key-value store. In the free world replication protocol, only a single “write” client is authorized to modify the key-value store at any time but any number of clients may be authorized to read data from the key-value store. The write client sends its transactions to multiple nodes in the replicated key-value store. As a result, the latency between the transaction being sent from the client and the transaction being received by the multiple nodes is reduced by comparison to existing protocols in which each client sends transactions to a single node and that node forwards the transactions. A consensus protocol, driven by a master node, is used to periodically ensure consistency, but the data transactions themselves do not make use of a master node.

Abstract: The system and method described herein may leverage active network scanning and passive network monitoring to provide strategic anti-malware monitoring in a network. In particular, the system and method described herein may remotely connect to managed hosts in a network to compute hashes or other signatures associated with processes running thereon and suspicious files hosted thereon, wherein the hashes may communicated to a cloud database that aggregates all known virus or malware signatures that various anti-virus vendors have catalogued to detect malware infections without requiring the hosts to have a local or resident anti-virus agent. Furthermore, running processes and file system activity may be monitored in the network to further detect malware infections. Additionally, the network scanning and network monitoring may be used to detect hosts that may potentially be participating in an active botnet or hosting botnet content and audit anti-virus strategies deployed in the network.

Abstract: A computational accelerator architecture facilitates change management of works in a model-based system engineering (MBSE) system in which each of the MBSE works includes a plurality of separately-identifiable statements. A linkage data store stores statement-wise, variable-strength linkages between certain statements of the MBSE works, where the linkages are indicative of associations between those certain statements. A revision control engine detects changes made to statements of MBSE works, and selectively indicates calls for revision of other statements in response to those changes based on respective strengths of linkages associated with the changed statements.

Abstract: Examples disclosed herein relate to monitoring flow activity on a network device. In an example, a neighbor table is maintained on a network device. The neighbor table may include a record of a neighbor network device and a hit bit corresponding to the neighbor network device. The hit bit may be used to represent a flow activity of the neighbor network device. A determination may be made whether a status of the hit bit corresponding to the neighbor network device is inactive. If the status of the hit bit is inactive, a flow entry corresponding to the neighbor network device may be deleted from an ASIC table on the network device.

Abstract: An authentication device for a vehicle, wherein the vehicle has a communications network for conveying communications data. The authentication device includes a communications interface which is connectable to the communications network of the vehicle, wherein the communications interface is configured to receive the communications data, and a processor which is configured to detect a characteristic of the received communications data, wherein the processor is configured to authenticate the communications data based on a comparison of the detected characteristic with a reference characteristic.

Abstract: An adaptive switch port role configuration system includes a first switch coupled to port on a second switch by an ISL, with end devices coupled to the second switch. The second switch transmits a port reconfiguration message to the first switch via the ISL while operating as a leaf switch with the port configured as an E port and, in response to an acceptance, performs link reset operations including reconfiguring the port as an N port. The second switch then transmits a FLOGI message for the port configured as the N port to the first switch via the ISL and, in response to an acceptance, transmits a respective FDISC message via the first ISL to the first switch for each of the end devices. The second switch then receives a response for each FDISC message, and uses end device addresses included in the responses to operate as an NPIV gateway.

Abstract: A method, a device, and a non-transitory storage medium are described in which a micro-adapter architecture for a device gateway service is provided. The micro-adapter architecture for a device gateway service may be included in a cloud native backend gateway. The cloud native backend gateway may include a set of adapters that are logically grouped in layers for providing device gateway services. The device gateway services may include an application layer, a device layer, and a transport layer. The device gateway services may include bounded contexts based on rules that define the application layer, the device layer, and the transport layer. The device gateway services may be microservices that are distributed within the defined layers.

Abstract: Systems, methods, and computer-readable mediums for federating an enterprise and a SaaS provider across one or more network slices of a network service provider. A SaaS provided by a SaaS provider for provisioning to an enterprise can be recognized. One or more network slices within a network of a network service provider between the enterprise and the SaaS provider can be identified. The one or more network slices can be used to provision the SaaS to the enterprise. As follows, the SaaS provider can be federated with the enterprise across one or more network service providers, including the network service provider. Specifically, the SaaS provider can be federated with the enterprise by uniquely associating the one or more network slices provided by the network service provider with the SaaS provisioned by the SaaS provider to the enterprise.

Abstract: A method is provided for replacing an enterprise legacy PBX with an advanced IP-enabled system, comprising: (i) providing configuration data of the legacy PBX; (ii) analyzing the data provided, and detecting missing details from among the legacy PBX configuration data; and detecting conflicts that exist among the legacy PBX configuration data; (iii) retrieving information associated with missing details by approaching data source(s) other than the source for the legacy PBX configuration data, and resolving detected conflicts; (iv) converting data associated with the users of the legacy PBX for use by a system implementing an advanced IP-enabled solution; and (v) configuring the advanced IP-enabled system accordingly.

Abstract: In one embodiment, a system comprising memory and processor(s), the processor(s) at least adapted to compute representative latency value(s) for a network device, based on a plurality of latency values obtained for a plurality of packets which passed through the network device over a period of time, the plurality of latency values indicative of latency between ingress to and egress from the network device, obtain latency value(s) for packet(s) which passed through the network device after the period of time, the latency value(s) indicative of latency between ingress to and egress from the network device, determine a determination of congestion level(s) for the network device, including analyzing at least one of the latency value(s) in relation to at least one of the representative latency value(s), and generate an indication in accordance with the determination, the indication to be outputted on at least one output device.

Abstract: A point-to-point radio system includes a phased array antenna system and circuitry to couple the phased array to a diplexer for steering nulls of the phased array to suppress interference.

Abstract: In various embodiments, an apparatus, a non-transitory computer-readable media, and a method are provided, involving a technique to: receive an indication of a receipt, via a first path segment, of a first packet that includes a header that is configured for use in identifying a path segment identifier data structure that includes a sequence of path segment identifiers including at least one first path segment identifier configured for use in identifying the first path segment, a second path segment identifier that identifies a region of a network that does not include the current node and that is configured for use in identifying a second path segment, and a third path segment identifier configured for use in identifying a third path segment; detect, using the header of the first packet, the path segment identifier data structure and an active identifier indicator for designating one of the path segment identifiers in the sequence for use by the current node; determine that the active identifier indicator de

Abstract: A method is disclosed performed by a base unit, of a base station system of a wireless communication network. The base station system further comprises a remote unit connected via a wired transmission line to the base unit, the remote unit being arranged for transmitting signals wirelessly to a wireless communication device. The method comprises modulating received Media Access Control, MAC, data packets onto a plurality of sub-frequency bands of a frequency band of the transmission line, and transmitting, to the remote unit, the modulated MAC data packets over the transmission line. Further, a corresponding method performed by a remote unit is disclosed.

Abstract: A system and methods for dynamically controlling sample rates and data flow in a distributed networked environment by dynamic determination of statistical significance or characteristics for an unlimited number of data collection scripts concurrently executed on concurrently rendering web pages operating an unlimited number of advertisements. Consumer and media behaviors are sampled on all the different components of the distributed environment to gather information, which is transmitted to a downstream statistical analytics system. The system and methods are configured to balance the communication data flow and load among servers and browsers in this distributed networked environment that are engaged in viewing of online content including online content with one or more advertisements.

Abstract: A control substrate is provided with a first electric current limiting resistor and a first voltage limiting Zener diode which are connected to a power supply line, and second electric current limiting resistors and second voltage limiting Zener diodes which are connected to communication lines. Of an electronic circuit configured from the control substrate and a sub-substrate, a first area connected to one side of the power supply line and the communication lines and a second area connected to the other side thereof with reference to the first and second electric current limiting resistors and the first and second voltage limiting Zener diodes are arranged spaced apart from each other by a predetermined interval so that the areas are considered separate areas in terms of intrinsically safe explosion-proof requirements.

Abstract: A method may include obtaining a forwarding rule associated with a network. The method may also include identifying a property associated with the network. The property may include a property value comprising a duration value. Additionally, the method may include validating, for the forwarding rule, the property in the network. Responsive to the property being valid for the forwarding rule, the method may include updating the duration value based on a first equation set. Responsive to the property being invalid for the forwarding rule, the method may include updating the duration value based on a second equation set. Furthermore, the method may include calculating a length of validity value of the property. The length of validity value may be based on the updated duration value. The method may include performing network monitoring. The network monitoring may be based on the length of validity value of the property.

Abstract: A network monitoring system comprising: a prediction unit configured to acquire information needed for detecting an abnormality in a virtual network function provided in a virtualization infrastructure, and predict performance information of a virtual network function that is to be newly provided and monitored; a generation unit configured to generate an abnormality determination rule to serve as a reference for determining whether or not actual performance information of a virtual network function falls within an allowed range that is set based on the predicted performance information; a determination unit configured to perform abnormality determination using the actual performance information of the virtual network function and the abnormality determination rule; and an output unit configured to output an abnormality notification if it is determined by the determination unit that there is an abnormality.

Abstract: Disclosed are a terminal operation method and a terminal which: transmit an EMM request message to a network entity; at the same time as transmitting the EMM request message, start a timer for detecting a case in which an EMM response message is not received; receive the EMM response message to which integrity protection is not applied; and wait for an additional EMM response message while operating the timer without stopping the timer.

Abstract: A method and system for executing a transaction request using a communication channel such as SMS or email has been described. The disclosure provides a proactive/reactive smart response processing system/framework for providing capability to a user to take action from any channel other than desktop. This system takes care of authentication as well by generating a unique key Reply Capture ID Code (RCID) and incorporating it as part of response thus ensuring that the action is being taken from authentic source. The RCID based logic lets each user to be authenticated and at the same time acts a portable token for the transactional request. The invention creates a generic methodology by which responses to communications can be captured and processed via a centralized ERP system.

Abstract: An embodiment of the present invention provides a method for supporting non-access stratum (NAS) signaling of a user equipment (UE) by a base station in a wireless communication system, the method comprising the steps of: transmitting, to the UE, information for supporting a connection to a next generation (NG) core; receiving a NAS-related message from the UE; performing one of MME selection and AMF selection according to whether the NAS-related message includes information regarding the use of NAS; and transmitting an NAS message to an MMF or an AMF which is determined as a result of performing one of the MME selection and the AMF selection.

Abstract: A controller, in a software-defined networking control layer, may determine auto-discovery parameters and may use the auto-discovery parameters to identify a first set of forwarding boxes within a network. The controller may identify a second set of forwarding boxes within the network that communicate with or are otherwise coupled to the first set of forwarding boxes. The controller may forward requests to the first and second sets of forwarding boxes to control traffic exchanged via the first and second sets of forwarding box. A third set of forwarding boxes located outside the network may request admissions into the software defined network, and requests from the third set of forwarding boxes may be forwarded to the controller via the first or second sets of forwarding boxes. The controller may authenticate the second and the third sets of forwarding boxes based on their relationship to the first set of forwarding boxes.

Abstract: The techniques disclosed herein include a computing device for Internet of Things (IoT) solution sizing. The computing device is to determine a solution deployment metric, trigger edge traffic, monitor a round trip characteristic and an actuation pattern, execute permutations of input workloads, and determine a solution deployment.

Abstract: An information processing apparatus includes an acquisition unit that acquires information related to a network including a group of nodes, and a group of real links that connects the nodes, an adding unit that generates an extension network by adding to the network at least a virtual link that link nodes that are not linked by a real link, and a clustering unit that clusters the group of the nodes by iteratively calculating a stochastic process of a transition between the nodes linked by the real link and the virtual link in the extension network until the stochastic process is regarded to be in a steady state.

Abstract: Methods and systems of malware detection in distributed computer systems. An example method includes: receiving, by a network router, a network packet originated by a client computer; matching the network packet to a default route; forwarding the network packet to a command and control server simulator; and forwarding, to the client computer system, one or more response packets comprising a command and control instruction issued to the client computer system by the command and control server simulator.

Abstract: Embodiments for performance management in a computing storage environment. At least one of a plurality of performance characteristics associated with a quality of service (QoS) between a storage system and a host is dynamically controlled by uploading code of a QoS logic, from the host to the storage system, for determining and specifying the at least one of the plurality of performance characteristics, thereby reducing overhead of QoS management data required to be stored within or communicated to the storage system.

Abstract: A network element employing multiple namespaces in performing IP packet routing. The network element maintaining two or more namespaces. A first namespace corresponds to an in-band network domain and a second namespace corresponds to an out-of-band network domain. The network element performing IP packet routing over the in-band network domain and the out-of-band network domain using said two or more namespaces. Embodiments allow operators to more easily implement separate routing tables for “in-band” and “out-of-band” communication. Having separate routing tables for in-band and out-of-band communication prevents malicious CPEs and hacked CMs from directly communicating to servers on the out-of-band network, thereby increasing security for CMTS operators.