Juniper Networks, Inc.

Cisco Technology, Inc.

Dhiraj D Ballal

Saravanadas P Subramanian

Jacopo Pianigiani

Prasad Chigurupati

Sanjay Agrawal

Harsha Srinath

Gregory M Dalle

Sandesh Kumar Sodhi

Venkatesh Badakere Ramachandra

Manas Pal

Subash Tirupachur Comerica

Kartik D Shah

Apurva Mehta

Rohini Kasturi

Kumar B Mehta

Chandrodaya Prasad

Santosh Gupta

Sachin G Gorde

Virendra K Malaviya

Kiritkumar B Joshi

Venkatesh Gota

Sureshkannan Duraisamy

Venkatesh B R Gota

Prasad Chiqurupati

Wladimir Araujo Filho

Christian Lambert

Bill Hong

Venkatesh Gota B R

A system and method for modifying services provided by one or more network devices. A processor of a first network device identifies defined events in each of a plurality of applications, including a first defined event associated with a first application. The processor assigns a signal-route to each defined event. The processor then executes the first application and, when the processor detects occurrence of the first defined event during execution of the first application, the processor modifies services provided by a second network device by adding the first signal-route to or removing the first signal-route from a routing information base (RIB) on the first network device and advertising, to the second network device, the change in the RIB.

Route signaling driven service management

A device may receive a control packet associated with a connection. The control packet may include a network address. The device may identify an application layer identifier that is associated with the network address. The device may identify a service rule associated with the application layer identifier. The service rule may identify a service to be applied to a data packet associated with the connection. The device may provide the control packet based on identifying the service rule. The control packet may be provided to permit the service to be applied to the data packet in accordance with the service rule.

Dynamically identifying and associating control packets to an application layer

A first device may receive first route information, from a second device, identifying a first route to the second device for a packet to be provided toward a destination via the second device. The first device may generate second route information identifying a second route to the first device for the packet. The first device may provide the second route information to a third device. The packet is to be received by the first device. The first device may receive the packet from the third device via the second route after providing the second route information to the third device. The packet is to be provided to the second device by the first device. The first device may perform a service on the packet based on being identified by the second route information as a next hop for the packet and prior to providing the packet to the second device.

Performing a service on a packet

A system and method for handling critical events in service gateways. Configuration information is received in a service gateway, the configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, the configuration information including one or more redundancy policies associated with the redundancy set, a service redundancy policy defining changes to be made in a service when a transition occurs in the state of the redundancy set. The service gateway receives further configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set. In response to detecting a redundancy event in the service gateway, the service gateway transitions the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state, modifies a first signal-route state associated with the redundancy set and modifies the service based on the service redundancy policy.

In general, techniques for dynamically provisioning service chains are described. In one example a network device comprises a control unit having at least one processor coupled to a memory, wherein the control unit is configured to receive a services list comprising an ordered list of services, the ordered list of services specifying at least a first service and a second service. The network device also comprises a forwarding unit coupled to the control unit and configured to receive a packet of a packet flow from a first service node that has applied the first service to the packet, wherein the forwarding unit is configured to send, based at least on the ordered list of services, the packet to a second service node that applies the second service.

Dynamic service chain provisioning

A method is provided in one example and includes communicating an access request to a network element, the access request is associated with network authentication relating to a subscriber. The method also includes receiving an access response that includes a profile associated with the subscriber. The profile can include a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan, which defines a data allotment assigned to the group over a specified time interval. In more detailed embodiments, a unique data string sent by an Authentication, Authorization, and Accounting element is received, where the unique data string identifies a full set of subscribers belonging to the group. Data underutilization of a first subscriber is offset by data overutilization of a second subscriber, where a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned.

System and method for providing virtual user groups in a network environment

In general, techniques are described for providing high availability as a service. The techniques may be performed by a device that includes an interface and a control unit. The interface is configured to receive network traffic originating from a subscriber device operated by a subscriber. The control unit is configured to determine whether to provide a high availability service with respect to at least a portion of the network traffic based on a subscriber profile associated with the subscriber. The control unit may further be configured to provide the high availability service for at least the portion of the network traffic based on the determination of whether to provide the high availability service. The control unit may further be configured to process at least the portion of the network traffic with the network device, and forward at least the portion of the network traffic.

Providing high availability as a service with network devices

In general, techniques are described for supporting interchassis redundancy (ICR) by a plurality of network access servers (NASes) that are members of an ICR. For example, techniques may be used to associate, within a RADIUS server, multiple NAS identifiers for the NASes with a single NAS identifier alias. The RADIUS server is configured to handle RADIUS protocol messages from any member of the ICR cluster as though the RADIUS protocol messages issued from a single NAS having the NAS identifier alias.

Clustered AAA redundancy support within a radius server

A method, performed by a network device, may include sending a request to a first server, detecting a first timeout without receiving a response from the first server, and sending the request to the first server and to a second server, in response to detecting the first timeout without receiving a response from the first server.

Server selection during retransmit of a request

Wireless devices that are attempting to connect to a packet data network may be blocked from issuing connection requests to the network during periods in which, due to the failure of other network devices, the connections requests will fail. A device may particularly determine when a connection request to access a network, from a machine to machine (M2M) device, will fail or has failed. The device may create, in response to the connection request, a response to the connection request, the response including an indication that the M2M device is to be blocked, by other network devices, from accessing the network. The device may transmit the response to the connection request to the other network devices, the response to the other network devices including one or more parameters that identify a duration for which the M2M device is to be blocked and an identification of the M2M device.

Feedback for machine to machine devices to account for failure of network elements

A method is provided in one example embodiment and includes communicating an access request message associated with a mobile node, receiving an access accept message that includes domain name data associated with the mobile node, and communicating a packet data protocol (PDP) context accept message for a tracking PDP context associated with the mobile node without associating an internet protocol (IP) address to the mobile node. The tracking PDP context identifies that the mobile node is available to receive network data. In more particular embodiments, the access request message includes an International Mobile Subscriber Identity (IMSI) associated with the mobile node, and the domain name data includes a fully qualified domain name. In still other embodiments, the tracking PDP includes a protocol configuration option (PCO) indicating that an IP address is not required for the mobile node.

System and method for providing network initiated mobile access in a network environment

Malfunctioning machine to machine (M2M) devices in a wireless network can be detected and blocked from the network. In one implementation, a device may monitor uplink traffic from a M2M device and determine, based on the monitoring, whether the M2M device is malfunctioning with respect to an uplink data rate of the M2M device. The device may transmit, in response to the determination that the M2M device is malfunctioning, one or more messages instructing network devices to delete communication sessions corresponding to the M2M device, where at least one of the one or more messages is associated with a time period value indicating a time period in which the deletion of the communication session is to be enforced.

Growing community of inventors

Santa Clara, CA, United States of America

Dhiraj D Ballal