Juniper Networks, Inc.

John Gibbons

Paul Raison

Sunil Madhaorao Gandhewar

Paul Howard

Cristina Radulescu-Banu

Mathias Kokot

Venkatesh Padebettu

Sudhir Krishnan

Jayadev H R

In some implementations, a network device may receive an indication of a switchover for a subscriber group that contains subsets of subscriber sessions. The network device may transition each subset of the subscriber sessions to a state associated with traffic forwarding. The network device may selectively transition each subset of the subscriber sessions from the state associated with the traffic forwarding to a state associated with traffic services.

State transitions for redundancy groups

A disclosed apparatus may include and/or represent a first node and a second node communicatively coupled to the first node. In some examples, the second node is configured to send binding information to the first node and then resend the binding information to the first node due at least in part to not having received an acknowledgement of successful installation of the binding information from the first node. Various other devices, systems, and methods are also disclosed.

Devices, systems, and methods for installing binding information after failures caused by transient errors

In general, techniques are described for supporting bulk delivery of change of authorization data in authentication, authorization, and accounting (AAA) protocols, where delivery is performed as a change of authorization after a subscriber has successfully authenticated and initially authorized. In one example, the techniques are directed to a method including determining, by a RADIUS server for a service provider network, change of authorization data for services to which the subscriber of the service provider network has subscribed. The method further includes generating, by the RADIUS server, RADIUS messages that form a transaction between the RADIUS server and a network access server acting as a RADIUS client. The RADIUS messages provide all of the change of authorization data to the network access server prior to the network access server provisioning the services. The method further includes outputting, by the RADIUS server, the RADIUS messages to the network access server.

Bulk delivery of change of authorization data via AAA protocols

A device may determine, based on layer 2 protocol information of incoming traffic, whether to forward the traffic as layer 2 traffic or terminate the traffic as layer 3 traffic. The device may receive the incoming traffic as packets of a virtual local area network (VLAN) and may analyze a protocol type included in layer 2 header information of the packets to classify, based on the protocol type, the packets as layer 2 output traffic or layer 3 output traffic. The device may transmit, as layer 2 traffic of the VLAN, those of the packets that are classified as layer 2 output traffic, and may terminate, to layer 3 traffic, those of the packets that are classified as layer 3 output traffic.

Mixed mode L2 cross connect and L3 termination at an edge network device

A network access device is described that uses a modified lower layer two (L2) software interface that is enhanced to operate as a proxy for a dynamic upper L2 software interface when the upper L2 software interface has been torn down, i.e., terminated unbeknownst to a subscriber device. The lower L2 software interface may, for example, be extended to incorporate certain features of the upper L2 software interface to detect such a condition. In the absence of the upper L2 software interface, the lower L2 interface may output a simulated termination request on behalf of the upper L2 interface and in accordance with the upper L2 protocol.

Growing community of inventors

Ashland, MA, United States of America

John Gibbons