Calix Limited

Calix Networks, Inc.

Catix, Inc.

Duane M Butler

Christopher Thomas Bernard

Christopher D Koch

Berkay Baykal

Shaun Noel Missett

Michael W Conner

Mike Conner

Charles Eddleston

Bruce F Naegele

Steven G Knight

In general, techniques are described for providing an isolation virtual local area network (VLAN) for layer two access networks. A server comprising an interface and a control unit may implement the techniques. The interface receives a message that initiates a request for a layer three (L3) network address for use by a client device via an isolation virtual local area network (VLAN) that supports transmitting data from a network device to the server, where the network device is intermediately positioned between the client device and the server. The message includes a layer two (L2) address associated with the client device. The control unit determines whether to allow the client device to access the network and assigns the L3 network address to the client device based on the determination.

Isolation VLAN for layer two access networks

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions ('MAC collisions') may be prevented.

Secure DHCP processing for layer two access networks

In general, techniques are described for inline packet replication in network devices. A network device referred to as an optical line terminal (OLT) may implement the techniques. The OLT comprises a customer interface that supports different logical interfaces to which couple a plurality of optical network terminals (ONTs) and a network interface that receives a data unit. The OLT further comprises a conversion unit, such as a media access control (MAC) module, located in a data path of the optical line terminal that determines whether the received data unit is a candidate for replication. The conversion unit includes an inline packet processing module that performs replication to generate at least one copy of the data unit based on the determination that the received packet is a candidate for packet replication. The customer interface outputs the at least one copy of the data unit to the ONTs.

Inline packet replication in network devices

The disclosure presents techniques for merging multiple data flows in a network such as a Passive Optical Network (PON). The PON comprises an interface module and network nodes connected to the interface module via an optical fiber link. Each network node further serves client devices. The client devices request multiple data flows, requiring the interface module to serve multiple data flows to a network node for delivery to the devices. The interface module merges received data flows to permit multiple flows to be processed by a single segmentation and reassembly (SAR) engine, reducing hardware cost and complexity within the node. However, subunits associated with different data flows within a merged data flow are not interleaved with one another. Instead, the subunits associated with an original unit of information are transmitted contiguously within the merged data flow, facilitating identification and reassembly of the subunits for a particular microflow.

Merging multiple network data flows

Techniques for reestablishing network address associations upon recovery of a passive optical network (PON) disablement rely on storage address association information. A network node stores address association information in non-volatile memory upon detecting a network disablement. Upon recovery of the PON from the disablement, the network node associates network addresses to clients in accordance with the address association information. The network node may further verify the associations by sending ARP queries for the network addresses to the associated clients. Alternatively, the network nodes may reestablish the address associations by tracking the length of time of the network disablement, and updating address association information in accordance with the length of the disablement.

Method, device and computer-readable storage medium for network address association recovery

The disclosure is directed to techniques for merging multiple data flows in a Passive Optical Network (PON). The PON comprises an interface module and a plurality of network nodes connected to the interface module via an optical fiber link. Each of the network nodes further serves client devices. The client devices request multiple data flows, requiring the interface module to serve multiple data flows to a network node for delivery to the devices. The interface module merges received data flows to permit multiple flows to be processed by a single segmentation and reassembly (SAR) engine, reducing hardware cost and complexity within the node. However, subunits associated with different data flows within a merged data flow are not interleaved with one another. Instead, the subunits associated with an original unit of information are transmitted contiguously within the merged data flow, facilitating identification and reassembly of the subunits for a particular microflow.

Merging multiple data flows in a passive optical network

Techniques for reestablishing network address associations upon recovery of a passive optical network (PON) disablement relay on storage address association information. A network node stores address association information in non-volatile memory upon detecting a network disablement. Upon recovery of the PON from the disablement, the network node associates network addresses to clients in accordance with the address association information. The network node may further verify the associations by sending ARP queries for the network addresses to the associated clients. Alternatively, the network nodes may reestablish the address associations by tracking the length of time of the network disablement, and updating address association information in accordance with the length of the disablement.

Growing community of inventors

Anoka, MN, United States of America

Duane M Butler