Cisco Technology, Inc.

Hsia R Yu

Shuxian Lou

Rajesh Bhalla

Jie Chu

Michael Fingleton

Processes and systems to create a plurality of sequence number spaces in a security association at a transmission device. Each sequence number space corresponds to a respective class of traffic. Each sequence number space is identified by a unique selector value. For each sequence number space, a sequence number counter is created for counting a sequence of outbound packets of a class of traffic corresponding to the sequence number space. For an outbound packet of a particular class of traffic, a selector value of a sequence number space of the particular class of traffic is written into a first portion of a sequence number field in the outbound packet. Low-order bits of the current value of a sequence number counter, associated with the sequence number space of the particular class of traffic, is written into a second portion of the sequence number field. The sequence number counter is then incremented.

Anti-replay checking with multiple sequence number spaces

According to one embodiment of the present invention, a method, a logic, and systems for selecting a communications protocol are disclosed. An initial request having a static Internet Protocol address is received from a mobile node, and a dynamic address is assigned to the mobile node. A data packet is received from the mobile node, and whether the data packet uses the dynamic address or has a mobile Internet Protocol request is determined. If the data packet has the mobile Internet Protocol request, the data packet is processed using a mobile Internet Protocol process. Alternatively, if the data packet uses the dynamic address, the data packet is processed using a simple Internet Protocol process.

Growing community of inventors

Milpitas, CA, United States of America

Hsia R Yu