Juniper Networks, Inc.

Pulse Secure, LLC

Hartmut Schroeder

Hendrikus G P Bosch

Sreenivasa R Tellakula

Prem Ananthakrishnan

Nikolas Dawson Kitson

Apurva Mehta

Rahul Aggarwal

Thomas Wayne Anderson

Bin William Hong

Srinivasa Chaganti

Serpil Bayraktar

Hendrikus Gp Bosch

Pulikeshi Vitalapura Ramanath

Aggarwal Rahul

Bin W Hong

In one example, a network device external to a services complex injects a plurality of probe packets along service chains provided by the services complex, wherein each of the plurality of probe packets includes a first timestamp indicating a time at which the network device sent the respective probe packet. Each of a plurality of service nodes in the services complex modifies each of the plurality of probe packets by inserting a respective second timestamp indicating a respective time at which the respective service node processed the respective one of the plurality of probe packets. An analytics device aggregates probe report information received from each of the plurality of service nodes to determine one or more path monitoring metrics.

End-to-end monitoring of overlay networks providing virtualized network services

In general, techniques are described for emulating mobile authentication methods to establish authenticated connectivity between a mobile service provider gateway and a wireless device attached to an alternate access network. For example, a system operating according to the described techniques includes a mobile service provider network, an alternate access network having an access gateway, and an authentication server of the mobile service provider network that receives a network access request. A subscriber database responds to the network access request with virtual mobility information, wherein the network access request does not include an International Mobile Subscriber Identity (IMSI), and wherein the virtual mobility information comprises a virtual IMSI. The access gateway uses the virtual mobility information to signal a mobile network gateway of the mobile service provider network to establish a service session for the wireless device over the alternate access network that is anchored by the mobile network gateway.

Non-mobile authentication for mobile network gateway connectivity

In general, a mobile virtual private network (VPN) is described in which service provider networks cooperate to dynamically extend a virtual routing area of a home service provider network to the edge of a visited service provider network and thereby enable IP address continuity for a roaming wireless device. In one example, a home service provider network allocates an IP address to a wireless device and establishes a mobile VPN. The home service provider network dynamically provisions a visited service provider network with the mobile VPN, when the wireless device attaches to an access network served by the visited service provider network, to enable the wireless device to exchange network traffic with the visited service provider network using the IP address allocated by the home service provider network.

Virtual private networking with mobile communication continuity

A cellular service provider network includes a subscriber database that associate identifiers from the cellular mobile devices (e.g., IMSIs stored within SIM cards of the devices) with layer three (L3) network addresses currently assigned to the cellular mobile device by the cellular network for providing data service to the cellular mobile devices. The subscriber database further stores identifiers for wireless local area network (WLAN) interfaces of the cellular mobile devices. The cellular service provider network includes a server coupled to a layer two (L2) network having a plurality of wireless access points. In response to access requests from the cellular mobile devices over the L2 network, the server queries the subscriber database of the cellular service provider network and assigns the network addresses to the cellular mobile devices by matching L2 network addresses specified within the access requests with the identifiers of WLAN interfaces stored in the subscriber database.

Network address preservation in mobile networks

Network devices provide seamless offloading of data communications from a service provider's cellular network to an alternate access network outside of the service provider's cellular network. After a cellular mobile device has initially been authenticated by devices in the cellular network to communicate with a packet data network via the cellular network, the cellular mobile device is configured to leverage its prior authentication on the cellular network and automatically obtain credentials for use in logging onto the alternate access network, without requiring any action by a user of the cellular mobile device. After the cellular mobile device is logged on to the alternate access network, the cellular mobile device sends wireless data communications to the packet data network via the alternate access network instead of the cellular network.

Credential generation for automatic authentication on wireless access network

A VPN handler of a client device is described that provides VPN connectivity by automatically creating multiple split VPN tunnels that provide direct access to different VPN concentrators of an enterprise based on specific resources requested by the client device. A local VPN concentrator normally used by the client device may provide the VPN handler with a resource list that provides a mapping of the resources of the enterprise network to the multiple VPN concentrators that have been deployed to provide secure access to those resources. The local VPN concentrator may dynamically update the resource list on the client device so as to control the construction and use of the split VPN tunnels by the VPN handler based on changes to the enterprise network. The split tunnel approach may be transparent to applications executing on the client device and may be easily deployed to the client devices of the enterprise.

Growing community of inventors

Duisburg, Germany

Hartmut Schroeder