Abstract: A method and apparatus for controlling bandwidth in a Virtual Private Network assigns and allocates transmission bandwidth to packet VPNs for either connectionless or connection-oriented communication. The method creates two views of transmission facilities: a user plane view and a control plane view. In the user plane view, the bandwidth of the transmission facility is split into quantified and identified partitions. In the control plane view, transmission facilities are represented as logical links forming a topology that can be used for the purpose of routing the VPN. The two views are tied together by assigning user plane partitions to VPN control plane links. As a result, the allocation of bandwidth to VPNs becomes a controllable and viewable entity, thereby facilitating management and QoS provisioning in a VPN network.

Abstract: A virtual private network (VPN) tunnel is established that extends from a source spoke to a destination spoke in a hub-and-spoke enterprise network. Prior to establishing the VPN tunnel, packets are sent from the source spoke to the destination spoke through the hub network. In this manner, packets are not dropped while the VPN tunnel is being set up. The VPN tunnel is established by querying a server for the network address of a destination router in the destination spoke, then setting up the VPN tunnel using a secure communication protocol. An extension to the Internet Key Exchange (IKE) protocol is used to obtain the private network address of the destination router during setup of the VPN tunnel. A forwarding table is updated after the VPN tunnel is established to reroute the packets through the new VPN tunnel.

Abstract: A transmission apparatus for participating in a virtual network constructed on a physical IP network, said transmission apparatus including: a node link monitoring unit configured to search an in-subnetwork node, which is a virtual network node existing within a first IP subnetwork that the transmission apparatus belongs to; a gatenode link monitoring unit configured to search an in-subnetwork gatenode, which is a virtual network gatenode existing within the IP subnetwork, wherein the in-subnetwork gatenode is linked to an out-subnetwork node that exists within a second IP subnetwork different from the first IP subnetwork; a detecting unit configured to detect a number of in-subnetwork gatenodes that exist within the first IP subnetwork; and a node link processing unit configured to determine whether a node linked to the transmission apparatus is an out-subnetwork gatenode based on the number of in-subnetwork gatenodes existing within the first IP subnetwork.

Abstract: In one embodiment, an autoroute filter list may be configured with a list of traffic identifiers. Accordingly, at a tunnel head-end node, an autoroute operation may be performed to configure the routing of all traffic in a network onto an appropriate tunnel except for traffic identified in the autoroute filter list.

Abstract: Apparatus are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a router includes multiple virtual interfaces and a policy engine. The virtual interfaces define connections between the router and corresponding subscribers of a service provider. A first virtual interface is operable to receive packets from a first subscriber and to process the packets in accordance with a first-level profile identifier. The policy engine is coupled with the virtual interfaces and operable to de-reference subscriber profiles of the subscribers on behalf of the virtual interfaces based on a database of hierarchically organized profile identifiers.

Abstract: Apparatus, methods and computer program products are disclosed for specifying a MAC identifier for a network-interface-device that includes multiple universally administered MAC identifiers and connects to a network through a port. The network-interface-device accepts data packets received through the port if the data packets contain a destination address that matches any active MAC identifier. The method includes reserving a first and second universally administered MAC identifiers from the available universally administered MAC identifiers. The first universally administered MAC identifier and the second universally administered MAC identifier are respectively associated with a first and second resource of the network-interface-device. The MAC identifier is assigned to one of the first or second resource and activated. Other aspects include apparatus logics and program products that perform the method.

Abstract: In a network connection method for interconnecting a virtual LAN distributed over plural sites via a network formed by plural layer 2 switches, a layer 2 switch monitors a first virtual LAN configuring frame sent from a site in the plural sites for configuring the virtual LAN, a network virtual LAN identifier is assigned based on the monitored first virtual LAN configuring frame, and the layer 2 switch generates a second virtual LAN configuring frame based on the assigned network virtual LAN identifier, and transmits the second virtual LAN configuring frame to the plural layer 2 switches in the network so as to establish the virtual LAN distributed over the plural sites. Accordingly, configuration and operation of a virtual LAN in a network of the layer 2 switches can be performed efficiently according to the virtual LAN tag of the subscriber.

Abstract: A DSLAM aggregation topology VLAN bundling mechanism includes an edge device port that receives a packet from a Digital Subscriber Line Access Multiplexer (DSLAM) device, the packet including an inner Virtual Local Area Network (VLAN) tag that identifies a Digital Subscriber Line (DSL) subscriber. A processor of the edge device adds an outer VLAN tag to the packet, the outer VLAN tag identifying the DSLAM and a destination server coupled to an Ethernet access network. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. 37 CFR 1.72(b).

Abstract: A telecommunication system comprises a first plurality of virtual circuit label switched paths (VC-LSPs) dedicated to communicate broadcast and unknown frames. The known frames have an encapsulated source site identifier used for media access control (MAC) address learning.

Abstract: Methods and apparatus for managing subscriber profiles are described herein. In one embodiment, the method includes receiving, from a requester, a request to determine an operation to be performed on a data packet. The method also includes determining profile identifiers associated with the requester, wherein the profile identifiers include, a first-level profile identifier associated with a lower-level profile identifier that defines the operation. The method also includes determining, based on the profile identifiers, that the operation should be performed on the data packet and transmitting an indication of the operation to the requestor, wherein the requestor performs the operation on the data packet.

Abstract: A technique that enables a source endpoint of a tunnel employing encapsulation to determine if a destination endpoint of the tunnel is reachable or unreachable. The technique issues “keepalive” packets that are returned to the source endpoint by a reachable destination endpoint. The source endpoint of the tunnel constructs a keepalive packet containing a return-keepalive packet, encapsulates it and forwards it over the tunnel to the destination endpoint. The destination endpoint, in turn, decapsulates the packet to yield the return-keepalive packet and forwards the return-keepalive packet preferably over the tunnel towards the source endpoint. Upon arrival at the source endpoint, the return-keepalive packet is processed. By receiving the return-keepalive packets the source end-point concludes the destination endpoint is reachable. After a predetermined number of return-keepalive packets have not been received, the source endpoint concludes that the destination endpoint is unreachable.

Abstract: Disclosed herewith is a network that can connect as many VPNs as possible to itself. In order to realize such a network, in the frame transfer method of the present invention, which enables a transfer path to be formed between nodes in the network so as to transfer frames, a terminal for transmitting frames or node located outside the transfer path, upon transmitting a frame through the transfer path, writes the transfer path selection information related to the transfer path and the output line information related to the output line from the terminating node of the transfer path in the frame according to the destination information set in the frame and transmits the frame to the destination.

Abstract: A method for formatting a signal in a mobile communication system by appending a plurality of medium access control headers to a plurality of medium access control-service data units for data transfer between a mobile station and network in the mobile communication system. If the service data units have the same characteristics, a medium access control-protocol data unit is formed by successively coupling the service data units to any one of the medium access control headers. If the service data units have different characteristics, the protocol data unit is formed by sequentially coupling each of the service data units and each of the medium access control headers. The formed protocol data unit is then transformed into a transport block with a predetermined size.

Abstract: A method is provided for transmitting data from a transmitting device (121) to a receiving device (125). The transmitting device transmits a first data frame (200) to a receiving device a first time (3100). Then it consecutively transmits the first data frame to the receiving device second through Nth times (3101-310N), each of second through Nth first data frame transmissions being made a first predetermined time period (350) after a respective previous first data frame transmission. After this, the transmitting device transmits a second data frame (200) to the receiving device a second predetermined time period (360) after the Nth first data frame transmission. In this method, N is an integer greater than 1, and the second predetermined time period is less than the first predetermined time period.

Abstract: To provide an integrated information communication system without using dedicated lines or the Internet, ensuring communication speed, communication quality, communication trouble countermeasures in a unified manner, wherein security and reliability in communication is ensured. The system is comprised of an access control apparatus for connecting a plurality of computer communication networks or information communication equipment to each, and a relay device for networking the aforementioned access control apparatus, the system having functions for performing routing by transferring information by a unified address system, and is configured such that the aforementioned plurality of computer communication networks or information communication equipment can perform communications in an interactive manner.

Abstract: This document describes tools that forward data packets having tags conforming to different formats. In one embodiment, the tools receive a data packet on each of a plurality of ports, each data packet comprising a tag conforming to a different format. The tools relay the data packets to a port capable of transmitting tags conforming to a plurality of formats. In another embodiment, the tools receive a plurality of data packets on a source port comprising a plurality of logical source ports, each of which is associated with a unique tag. At least one data packet is received on each logical source port. Each data packet includes the tag associated with the logical source port on which the data packet is received. The tools map each data packet to one of a plurality of virtual switches based on the logical source port on which the data packet is received.

Abstract: The present invention discloses a method for identifying node reachability, a method for identifying a link, a method for calculating a routing, and a method for disseminating node address information. In the method of the node address information dissemination, when the network is initiated, each node in the automatically switched optical network performs a node address aggregation process and an aggregation address dissemination process, and obtains and stores the aggregation address respectively. Therefore, any node in the network may judge whether the node and another node in the network are reachable to each other, and may further calculate the routing between the source and destination nodes pair. Moreover, the present invention also may determine whether any traffic engineering link in the multi-level ASON network is an external link or an internal link.

Abstract: A network enables a transfer path to be formed between nodes in the network so as to transfer frames. A terminal for transmitting frames located outside the transfer path, upon transmitting a frame through the transfer path, writes the transfer path selection information related to the transfer path and the output line information related to the output line from the terminating node of the transfer path in the frame according to the destination information set in the frame and transmits the frame to the destination. The starting node of the transfer path decides the transfer path used for transferring the frame according to the transfer path selection information set in the frame to transmit the frame while the terminating node of the transfer path decides the output line used to output the frame according to the output line set in the frame, thereby transmitting the frame to the output line.

Abstract: To send a connection control message associated with a first set of attributes, only a difference of the first set of attributes from a second set of attributes associated with an already active virtual circuit (to a common destination) may be sent (contained in the connection control message). The devices receiving the message may create the necessary configuration for the new virtual circuit by modifying a copy of the configuration of the active virtual circuit. Processing requirements may be minimized as the devices may not need to parse and decode long list of information element. The feature may be particularly important in setting up a virtual circuit for voice calls, as a long list of attributes may be associated with each virtual circuit, but the difference of attributes being only minimal.

Abstract: Systems and methods for communicating on a richly-connected multiprocessor computer system using a pool of buffers for dynamic association with a virtual channel. Packets are communicated in a multiprocessor computer system having a large plurality of processing nodes interconnected by a defined interconnection topology, in which a communication from a source processing node to a target processing node may pass through one or more intermediate nodes en route to the target processing node. A set of virtual channels is associated for each link in the interconnection topology. A first subset of buffers is dedicated for fixed correspondence to virtual channel identifiers, and a second subset of buffers is dedicated for dynamic allocation and assignment to virtual channels.

Abstract: Systems and methods for preventing deadlock in richly-connected multiprocessor computer system using dynamic assignment of virtual channels. Deadlock is prevented in a multiprocessor computer system having a large plurality of processing nodes interconnected by a defined interconnection topology. Each link in the interconnection topology is associated with a set of virtual channels. Each virtual channel has corresponding communication buffers to store communication data and each virtual channel has an associated virtual channel identifier. Each communication between a source processing node and a target processing node is assigned an initial virtual channel to convey the communication from the source processing node. At an intermediate processing node, a different virtual channel is assigned to convey the communication toward the target processing node, in accordance with pre-defined rules to avoid a cycle of dependency of communication buffer resources.

Abstract: Systems and methods for arbitrating for virtual channels to prevent livelock in richly-connected multiprocessor computer system. Livelock is prevented in a multiprocessor computer system, in which each of a large plurality processing node has input links and egress links. A virtual channel is assigned to convey the communication. Communication data from the plurality of input links is buffered in cross point buffers. A subset of the cross point buffers bids for, and arbitrates, use of the same one egress link. The virtual channel of the selected communication is identified. It is determined whether any of the other communications bidding for use of the egress link are associated with the identified virtual channel and if so whether any communication has been waiting longer than the selected communication. If so, allowing that communication to use the egress link before the selected communication does.

Abstract: A method and apparatus to enable IP networking for mobile hosts without requiring changes to be made to the TCP/IP stack in the operating system installed on the mobile hosts. The apparatus is an “intelligent device” that can be installed on or connected to a mobile host, and may comprise a software-only logical module, physical hardware, or a combination of both. To a mobile host, the intelligent device emulates a network interface such as an Ethernet card or a telephone modem. The intelligent device appears to an access network just like any regular IP host connected to the access network through a physical network interface device. The intelligent device handles all mobile networking functions for the mobile host, and may control multiple different physical network interface devices to enable a connection to the “best” access network available to the mobile user at his location.

Abstract: In one embodiment, the present invention is a method and apparatus for customer-controlled routing management. In one embodiment, a system for managing routing in a virtual private network includes a configuration management system for receiving settings from a user of the virtual private network, the settings specifying at least one of: virtual private network topology and routing preferences, and for provisioning the virtual private network in accordance with the user settings and a validation management system for validating the provisioned virtual private network.

Abstract: In general, techniques are described in which a plurality of network switches automatically configure themselves to operate as a single virtual network switch. A virtual switch is a collection of individual switch devices that operate like as single network switch. As described herein, network switches in a network that are capable of participating in a virtual switch may automatically discover one another. The participating network switches may then elect one of the participating switches as a master switch. The master switch may generate forwarding information and store the forwarding information in the participating switches, including the master switch. The forwarding information causes the participating switches to act like a single network switch.

Abstract: A network architecture for implementation in a vehicle is described that comprises an Ethernet gateway module (EGM) and network interface module (NIM). The EGM comprises an Ethernet switch and router therein and is configured to provide an open data network (ODN) connection to the network architecture for a plurality of open data network devices. The NIM is configured to provide an isolated data network and comprises an Ethernet switch to connect a plurality of secure devices to an isolated data network (IDN), the secure devices related to operation and navigation of the vehicle, a router and a gateway/router. The router is configured to interface the IDN to the open data network connections and comprises a packet filtering function to determine which, if any, data from the ODN may be passed through to the IDN and applied to operation and navigation of the vehicle via the secures devices connected to the IDN.

Abstract: A call setup and restoration schema is disclosed for providing an improved priority-based call setup and restoration schema in an optical communications system, allowing higher priority connections access to bandwidth by user-definable parameters. The call setup and restoration schema includes allowing higher priority connections to claim the resources of lower priority connections, and restoring them when bandwidth is available, or bumping another, even lower priority, connections. This aids in providing access to bandwidth by high priority services and in preventing outages or connection delays for high priority connections.

Abstract: In a communications network, a cluster switch is provided, where the cluster switch has plural individual switches. An abstraction layer is provided in the cluster switch, such that an interface having a set of ports is provided to upper layer logic in the cluster switch. The set of ports includes a collection of ports of the individual switches. Control traffic and data traffic are communicated over virtual tunnels between individual switches of the cluster switch, where each virtual tunnel has an active channel and at least one standby channel.

Abstract: Techniques are described for automatically establishing network tunnels among a set of routers. For example, the techniques allow a routing protocol, such as the Border Gateway Protocol (BGP), to be extended to generate routing advertisements that direct a receiving device to automatically establish a particular type of tunnel, e.g., a Resource Reservation Protocol with Traffic Engineering extensions (RSVP-TE) Label Switched Path (LSP), and automatically direct particular network traffic onto the tunnel. A method comprises receiving a routing advertisement from a network device, wherein the routing advertisement includes a destination reachable by the network device, and a tunnel attribute that specifies a type of network tunnel to be established to the network device for forwarding traffic to the destination, automatically establishing a network tunnel to the network device in accordance with the tunnel attribute, and forwarding network traffic to the destination using the established network tunnel.

Abstract: A selection resource executed within the network is configured for selecting from among a plurality of servers, distributed throughout the network at respective network-based server locations and each configured for providing a specified service, a selected server for providing the specified service for a client device at a network-based client location. The selection resource selects the selected server based on the corresponding server location relative to the client location, and causes a request having been generated by the client device to be sent to the selected server. Hence, the selection resource optimizes client-server interactions in a distributed computing network, based on the client location and the server location.

Abstract: One embodiment disclosed relates to a method of processing a packet sent to a provider network. The packet is received via a user port of an edge switch of the network. Forwarding and routing by the edge switch is determined based on a user VID. A provider VLAN tag, including a provider VID, is inserted into the packet prior to transmission of the packet via a provider port of the edge switch.

Abstract: In general, the invention relates to a method for routing a packet. The method includes receiving the packet in a network interface card (NIC), classifying the packet, placing the packet in a receive ring of the NIC, sending the packet to a virtual NIC associated with the receive ring, sending the packet to a first container associated with the virtual NIC, and routing the packet to a packet destination using the first container.

Abstract: The present invention provides an attribute value sampling device that obtains communication path establishing control information transmitted and received between data transfer devices, and sets monitoring on the basis of the communication path establishing control information. The attribute value sampling device obtains control information for establishing the communication path sent between the data processors, and extracts setting information relative to the obtaining the attribute value from the obtained communication path establishing control information, and obtains the attribute value from information passing through the path by using the extracted setting information.

Abstract: A system and method for implementing telephony devices in a distributed network environment is disclosed. The present invention provides for voice transmissions to be given a dedicated virtual local area network (“VLAN”) for packet transmission and reception to prevent poor quality of service. Non-voice data packets are transmitted on a separate VLAN.

Abstract: A method of simulating a telecommunications network may include providing a database including status information for a plurality of virtual network elements. More particularly, the status information for each of the plurality of virtual network elements may include a respective network element identifier. A communication including a received network element identifier may be received. If the received network element identifier does not correspond to a network element identifier included in the database, status information for a new virtual network element may be added to the database and the status information for the new virtual network element may include the received network element identifier. After adding the status information for the new virtual network element, a communication regarding the new virtual network element may be transmitted. Related systems and computer program products are also discussed.

Abstract: A routing method for communication from a source node to a destination node in a distributed wireless network which comprises a plurality of wireless mobile nodes.

Abstract: A method and apparatus for routing and forwarding between virtual routers is described. A method in a single network element comprises peering a first virtual router to a second virtual router, wherein the first and second virtual routers have separate address spaces and separate routing tables, distributing a set of one or more routes from the first virtual router to the second virtual router, wherein a first of the set of routes identifies the first virtual router as a next hop of the first route, said first route including a destination, and downloading to a set of one or more forwarding tables, the destination and the next hop.

Abstract: Exemplary embodiments are directed to a system and method for managing a network having multiple domains. An exemplary method includes identifying a router interface connected with a switch; assigning a Layer 2 identifier to the interface, wherein the identifier uniquely identifies a Layer 2 domain within the network; and assigning the Layer 2 identifier to the switch.

Abstract: A technique is disclosed that attempts to improve the evaluation of a network path's signal quality, as well as the selection of a network path for transmission purposes, without some of the costs and disadvantages of doing so in the prior art. In accordance with the illustrative embodiment, a node with access to the packet network, such as a VoIP telephone endpoint, evaluates the quality of service that is associated with each of multiple network paths. The evaluation process is iterative, in which the number of candidate paths is successively reduced from one iteration of the technique to the next. The multiple paths that remain as candidates in any given iteration are evaluated concurrently and at an evaluation bit rate that i) is less than the full transmission rate of the real-time traffic (VoIP) packets to be sent and ii) varies as a function of the number of candidate paths remaining under consideration.

Abstract: A method of mediating the flow of datagrams to a destination in a network is disclosed. The method includes the steps of receiving a datagram at a port of a network device, evaluating a destination address for the datagram based on fields in the incoming packet, searching a longest prefix match (LPM) table using the destination address as a LPM key, determining an address table index and an offset based on entries found in the search of the longest prefix match table, searching an address table using the address table index and the offset as an address key to determine an egress port number of the network device and forwarding the packet based upon at least the egress port number.

Abstract: Methods and systems for selectively processing VLAN traffic from different networks while allowing flexible VLAN identifier assignment are disclosed. According to one aspect, a layer 2 switch includes a virtual switch identifier data structure that associates a VLAN identifier extracted from a layer 2 frame and a port identifier corresponding to a port on which a frame is received with a virtual switch identifier. The virtual switch identifier is used to select a per-virtual-switch data structure, such as a forwarding table. The per-virtual-switch data structure is used to control processing of the layer 2 frame on a per-virtual-switch basis. The per-virtual-switch data structure may also be updated separately from the data structures assigned to other virtual switches.

Abstract: Under the present invention, a method, system, and program product for providing advanced Virtual Private Network (VPN) routing that includes classifying a network transmission, between a user and a host, wherein the classification is based upon a destination port, protocol, and the like, for routing the communication either via the VPN or not via the VPN and selectively routing the network transmission based upon the classifying of the transmission.

Abstract: A system and method are disclosed for routing packet traffic. A system that incorporates teachings of the present disclosure may include, for example, a Provider Edge (PE) router having a routing element that routes packet traffic between a plurality of autonomous systems according to one or more Virtual Routing and Forwarding (VRF) tables each having a plurality of Enhanced Interior Gateway Routing Protocol (EIGRP) Autonomous System (AS) numbers. Other embodiments are disclosed.

Abstract: A privately addressed home network bridge is provided for each of two privately addressed home networks. These bridges couple to corresponding gateways for each of the networks. A network tunnel connection is established between the two bridges via the gateways and an intervening publicly addressed network. At least one, and preferably both, of the home network bridges then serve as a proxy/router to facilitate an exchange of messages as between network devices of the two privately addressed home networks. Pursuant to a preferred approach the home network bridges use a mapping technique to correlate private addresses as used in the two privately addressed networks.

Abstract: Global ports are supported in multi-switch systems having arbitrary topologies. In some implementations, global ports are implemented in a manner which makes the switch system robust in the face of link failure. In specific Ethernet implementations, global ports enable flooding, learning, forwarding, and link aggregation across the switch system.

Abstract: A method for overhead processing of optical network and device thereof are disclosed, the device includes: an overhead memory, an overhead processor, and an overhead processor control module. The overhead processor control module is used for controlling the operation of the overhead memory and the overhead processor. The method includes: a system chip inputs the time slots of all overhead bytes that will be processed and descrambled data, and corresponding virtual container numbers, the overhead processor encodes the byte and stores all overhead byte of the same channel in the address of the same overhead memory; at the same time it stores in turn the overhead byte of different channels in different address spaces based on the virtual container numbers, so that an overhead processing logic performs a polling process. The method and device only use a set of overhead processing logic for the overhead of large capacity chips, and save the area and power consumption greatly, thereby reduce the production cost.

Abstract: A method for operating a router has the following steps. First, the router receives a data packet to be forwarded, the data packet having an indication that it is to be routed by tag switching to a destination router, the destination router to forward the packet to a destination computer. Second, the router prepends a tag to the data packet, the tag to be used by the destination router to route the data packet to the destination computer. Third, the router prepends an encapsulation header to the data packet, the encapsulation header to route the data packet to the destination router. Fourth, the router transmits the data packet with the encapsulation header and the tag for routing through the network to the destination router.

Abstract: The present invention leverages an existing content delivery network infrastructure to provide a system that enhances performance for any application that uses the Internet Protocol (IP) as its underlying transport mechanism. An overlay network comprises a set of edge nodes, intermediate nodes, and gateway nodes. This network provides optimized routing of IP packets. Internet application users can use the overlay to obtain improved performance during normal network conditions, to obtain or maintain good performance where normal default BGP routing would otherwise force the user over congested or poorly performing paths, or to enable the user to maintain communications to a target server application even during network outages.

Abstract: The present invention relates to a method and nodes for performing data traffic aggregation over an access domain using service bindings. Upon receipt of a service request related message at an access edge node for a first device of a user domain, the service request related message identifying the first device of the user domain and one of the service provider domains, a service binding is created at the access edge node. The service binding rules data traffic between the first device of the user domain and the service provider domain by committing an access node serving the user domain and the access edge node in a manner of managing data traffic therebetween over the access domain. An access node serving the user domain for which the service request related message is received is informed of the created service binding.

Abstract: A router device realizing a datagram transfer method for improving the datagram transfer efficiency by ascertaining the transfer target and/or the requested quality of service without referring to the datagram content. The router device has network interfaces connected with networks including at least one virtual connection oriented network, a table for registering a correspondence between a virtual connection identifier and a transfer target network interface and/or a quality of service, a connection identifier analysis unit for determining a transfer target network interface and/or a quality of service for a datagram entered from one virtual connection, by referring to the table according to a virtual connection identifier of that one virtual connection. The datagram can be transferred to the determined transfer target network interface, while applying a priority control for datagrams to be transferred by the router device according to the determined quality of service.