Alcatel Lucent

Jeremy W Touve

Chiang Yeh

Eric W Tolliver

Jagjeet Bhatia

Sindhu K Mohandas

Nalinakshan Kunnath

Pramoda V Nallur

R Leon Sangroniz

An auto fabric configuration (AFC) mode is provided to enable network elements, when added to a data communication network, to discover each other, using TLVs added to standard protocols. The AFC mode further allows for automatic configuration of the network fabric. For example, core features, such as link aggregation, Virtual Local Area Networks (VLANs) and Shortest Path Bridging (SPB) adjacencies, can be automatically configured.

System, method, and apparatus for network fabric configuration in data communication networks

A method and apparatus for ensuring that important confidential or proprietary information is not inadvertently released through email and similar transmissions. When file security firewall resident on a file security server or another network node receives an email intended for transmission, it determines whether the file revision history should be removed from any attachments. If so, the email is buffered and the attachments are extracted for file revision history by a file revision history remover associated with the firewall or an available proprietary file revision history remover. Once the file revision history removal is attempted, successfully or unsuccessfully, a reformed email is created, including either the original attachments or, in their place, a version of the attachment from which file revision history has been removed.

Information security method and appparatus

A network device for distributing authentication information between authorized nodes for purposes of concurrently 'pre-authenticating' a mobile user at a plurality of points throughout a LAN is disclosed. When a client attempts to access the network through the network device, the network device attempts to authenticate the client based on the credentials presented by the user. If authenticated, the client is admitted into the network at the network device and the client's pre-authentication information transmitted to one or more network nodes associated with an authentication group. Upon receipt of the pre-authentication information, the one or more network nodes are authorized to admit the client into the network at those nodes in addition to the network device at which the client was initially authenticated, thereby concurrently pre-authorizing the client at multiple points across the network.

Secure authentication advertisement protocol

The invention includes a method and apparatus for processing protocol messages for multiple protocol instances. In one embodiment, a method for processing protocol messages includes receiving a plurality of messages for a plurality of processors where each received message is associated with one of the protocol instances, generating a processing request for each message, queuing the processing requests, and servicing the queues in a manner for arbitrating access by the queues to the processors for processing the messages. A processing request generated for a received message identifies one of the protocol instances with which the message is associated. The processing requests are queued using a plurality of queues associated with the respective plurality of protocol instances, where each processing request is queued in one of the queues associated with the one of the protocol instances with which the processing request is associated. The servicing of each queue includes reading a processing request from the queue, if the queue has at least one processing request queued therein, and causing the one of the processors with which the processing request is associated to process one of the messages associated with the protocol instance identified by the processing request. The queues may be serviced in a round-robin manner for arbitrating access by the queues to the processors, thereby enabling atomic processing of the messages.

Method and apparatus for processing protocol messages for multiple protocol instances

System and method for performing automatic trunk formation in a multiple spanning tree protocol ('MSTP')-enabled bridge comprising a plurality of ports are described. In one embodiment, the method comprises determining which ones of the ports comprise MSTP trunk ports; forming an MSTP trunk group for each multiple spanning tree instance ('MSTI') comprising a group of Virtual Local Area Networks (&#x201c;VLANs&#x201d;) belonging to the MSTI; and, for each of the MSTP trunk ports, determining whether a status of the MSTP trunk port is trunk active and if so, adding all VLANs in the MSTP trunk group of the MSTIs that are forwarding on the MSTP trunk port as tagged members of the MSTP trunk port.

Growing community of inventors

Newhall, CA, United States of America

Jeremy W Touve