Cisco Technology, Inc.

Ip.access Limited

Joshua B Littlefield

Anton Okmianski

Mickael Graham

Allen Huotari

Joseph Salowey

Anton Okmyanskiy

Jason Frazier

David Neil

Shengyou Zeng

Edward Haynes

Archie Hensley

Alan Whitehead

Gregory Faison Morris

Ian McPherson

Sukrit Dasgupta

Ralph Droms

Richard Woundy

Kenneth Kinnear, Jr

Hemant Singh

Madhu Sudan

Ranjan Prasad

David Bainbridge

William Beebee

Jeffrey Cioli

Thomas Alan Parker

Phillip T DiBello

Erik J Synnestvedt

Brian P Shorey

Hari Rakotoranto

James Timothy Brown

Andrew H Sudduth

Richard A Coco

Kenneth I Oliver

Hugh W Gabrielson

Allen J Huotari

Joseph A Salowey

Gregory F Morris

A network management system for managing communications in a cellular communication network comprising an access point operably coupled to an access controller. The network management system comprises an access controller configuration logic module arranged to configure the access controller with configuration information. The network management system further comprises an access point configuration logic module arranged to configure the access point with configuration information comprising, at least in part, configuration information intended for the access controller.

Method and apparatus for provisioning of information in a cellular communication network

In one embodiment, a device in a computer network determines one or more tunnels affected by a downstream fault in the computer network, and determines one or more common Ethernet segments of the device used by the affected tunnels. As such, the device generates, for each of the one or more common Ethernet segments, a respective fault message aggregating tunnel information of each of one or more particular affected tunnels on the corresponding common Ethernet segment, and sends each respective fault message with aggregated tunnel information over a selected tunnel of the one or more particular affected tunnels on the corresponding common Ethernet segment.

Aggregated delivery of tunnel fault messages on common ethernet segments

A method and apparatus for tracking an identity of a user associated with a network lease is disclosed. The IP lease is correlated to user information by storing a user ID with lease information in a manner in which the user information is associated with the lease information. In an embodiment, the user ID is a Global User ID (GUID). In an embodiment the user ID is unique to a specified domain. In an embodiment, the user ID is given to only one user and never changes.

Associating network address lease information with user data

A technique for automatically terminating a session between a client and server in a communication network where the client fails to explicitly terminate the session. A client associated with the session is monitored to determine if a condition exists that warrants terminating the session between the client and the server. If a condition exists that warrants terminating the session, a check is performed to determine if the client has notified the server that the session is to be terminated. If not, the server is automatically notified that the session is to be terminated.

Termination of a communication session between a client and a server

An extensible authentication framework is used in cable networks such as Data Over Cable Service Interface Specification (DOCSIS) cable networks. The authentication scheme allows for centralized authentication of cable modems, as well as authentication of the cable network by cable modems. Additionally, the authentication scheme allows a Cable Modem Termination System (CMTS) to authenticate devices downstream from cable modems, such as Customer Premise Equipment (CPE) devices.

Authentication for devices located in cable networks

A network device is to receive traffic including neighbor discovery messages from requesting customer devices, and can detect the neighbor discovery messages within the traffic according to a distributed inspection scheme that includes the network device and a remote component. The network device is to then examine the neighbor discovery messages to determine if the neighbor discovery message should be forwarded to other of the customer devices, and respond to the requesting customer devices.

Neighbor discovery proxy with distributed packet inspection scheme

A proxy server according to an embodiment includes a memory and a communication unit. The memory is configured to store and retrieve a client device identifier and an associated client device transport address, while the communication unit is configured to send and receive messages. The communication unit is configured to receive an identification message according to a first protocol from a client device through at least one intermediate network address translator (NAT). The identification message includes the client device identifier and conveys the client device transport address. The communication unit is configured to receive a request message from an admin device including the client device identifier. The proxy server is configured to retrieve the associated client device transport address and instruct the client device to open a connection with the proxy server according to a second protocol that is different from the first protocol.

Systems and methods for remote access of network devices having private addresses

A method performed by a DHCP server. The method involves receiving a transformation instruction from a user or other command source. The method further involves in response to receiving a request from a client for a network address, applying the transformation instruction to the client request to generate a client identity pattern; and assigning a network address from a pool of network addresses to the client based on the client identity pattern. Apparatus for use in practicing the method are also claimed.

Computed client identifier in DHCP

A technique is performed by a high availability main primary DNS name server. The technique involves receiving a DNS update sent from a DNS client to the main primary DNS name server and directly modifying a main DNS record based on the DNS update. The technique further involves directing a backup primary DNS name server to modify a backup DNS record based on the DNS update while both the main primary DNS name server and the backup primary DNS name server (i) are configured to distribute DNS information to secondary DNS name servers and DNS clients and (ii) are in ongoing communication with each other, the backup primary DNS name server being configured to receive DNS updates sent from the DNS clients to the backup primary DNS name server and modify backup DNS records based on the DNS updates in response to a loss of communication between the main primary DNS name server and the backup primary DNS name server.

Highly available domain name system

An Internet service device includes data and instructions to generate a user interface to subscribe to an Internet service, and to automatically discover one or more service provider services. The internet service device may receive information indicative of a selected service provider from a user device, and may automatically discover a location of a subscription service and a configuration service for the selected service provider. Automatic discovery of one or more services may be performed using DNS SRV. Device can be automatically identified to service subscription and configuration servers to enable association of subscriber with a device.

Method of device service activation using a discovery mechanism

In accordance with an embodiment of the present invention, a customer premises equipment (CPE) apparatus includes a first communications unit, a second communications unit, and a processing unit. The first communications unit is configured to receive an inbound message packet from a first communications channel. The inbound packet includes a destination address. The second communications unit is configured to send an outbound message packet on a second communications channel. The processing unit is configured to generate the outbound packet from the inbound packet where the outbound packet is modified to include a CPE device identifier if the destination address matches a predetermined registration server address. In one embodiment, this enables automatic CPE identification during subscriber registration process.

Method of identifying a home gateway using network traffic sniffing and apparatus employing the same

A technique for synchronizing data caches. Data is maintained in the data caches as records. The records are associated with buckets which represent collections of one or more records. The buckets are collectively maintained in a synchronization set which represents a state of a data cache. A local entity synchronizes its data cache with a remote entity by sending its synchronization set to the remote entity in a synchronization request message. The remote entity compares information contained in the local entity's synchronization set with its own to determine if the two are consistent. If not, the remote entity notes inconsistencies in a response message that is then forwarded to the local entity. The local entity processes the response message including using it to update its data cache to be consistent with the remote entity's data cache.

Technique for data cache synchronization

A method and apparatus for generating configuration files using policy descriptions is provided. The present invention provides a method of generating a binary configuration file by receiving an identification encoded filename, parsing the identification encoded filename to determine identification parameters, matching the identification parameters to a set of configuration policy data to create configuration file parameters, and generating the binary configuration file from the configuration file parameters. The identification encoded filename can be can be run through an authentication check to provide increased security. Once created, the binary configuration file can also be validated, providing increased integrity. In one aspect of the present invention implemented is provided on a TFTP server. In another aspect of the invention an LDAP server is queried for certain configuration policy data, the configuration policy data being optionally cached on the TFTP server. The resulting configuration can be generated according to the DOCSIS configuration file standard, including removing non-version applicable DOCSIS configuration file parameters. The present invention can also be used to generate an annotated configuration file from the configuration file parameters, the annotated configuration file being viewable through a user interface.

Method and apparatus for generating configuration files using policy descriptions

Growing community of inventors

Wellesley, MA, United States of America

Joshua B Littlefield