Cisco Technology, Inc.

Cisc Technology, Inc.

Keith McCloghrie

Silvano Gai

Norman William Finn

Bijendra N Jain

Dinesh Ganapathy Dutt

Shai Mohaban

Ramanathan Kavasseri

Sandra C Durham

Ahsan Habib

Stefano Testa

Vinay Gaonkar

Bernard Roycroft James

Sanjeev Chidambar Joshi

Pere Joan Monclus Argany

Kiran K Toutireddy

Yakov Rekhter

Michael Fine

Itzhak Parnafes

Merwyn Andrade

Susan Marie Sauter

Hei Tao Fung

Christopher Young

Thomas James Edsall

Kaushik Narayan

L Alexander Clemm

Jean C Walrand

Bhushan Mangesh Kanekar

Davide Bergamasco

Premkumar Jonnala

Guglielmo Marco Morandin

Sanjeev Joshi

Prashant P Hegde

Stephan Robert

Andrew Bierman

Christopher James

Chethan Anand Bs

Ian Wallis

Handral Krishnamurthy Vivek

Vasmi M Abidi

Hongchi Shih

Controlling access to managed objects associated with a networked device. A method comprises receiving a request from a principal for access to a managed object associated with the networked device. The managed objects are accessible based on membership in access groups that are compliant with a Simple Network Management Protocol (SNMP). A first and a second of the access groups associated with the principal are determined. Access privileges for the principal are determined, based on the first and the second access groups. Access to the managed object is granted if permitted based on the access privileges for the principal.

Controlling access to managed objects in networked devices

An apparatus is disclosed for creating and storing policy data records comprising data identifying network policy decisions. After a data packet is received, a network policy decision is made based on information in the packet and one or more network policies. A policy data record identifying the network policy decision is created, and the policy data record is stored.

Tracking policy decisions in a network

A system and method for implementing telephony devices in a distributed network environment is disclosed. The present invention provides for voice transmissions to be given a dedicated virtual local area network ('VLAN') for packet transmission and reception to prevent poor quality of service. Non-voice data packets are transmitted on a separate VLAN.

Method for bring-up of voice over internet protocol telephones

A system and method for implementing telephony devices in a distributed network environment is disclosed. The present invention provides for checking data packets to ensure that non-voice data packets are properly tagged to be transmitted on a native virtual local area network ('VLAN'). Voice data packets transmitted on a separate VLAN with a higher priority.

Method for ensuring VLAN integrity for voice over internet protocol telephones

A method and apparatus for communicating a COPS protocol policy to a non-COPS-enabled network device is provided. A COPS proxy is connected between a policy server and a non-COPS-enabled network device. The policy server is configured to communicate COPS protocol policies to the COPS proxy, which is, in turn, configured to translate the COPS protocol policy into a policy that is in accordance with a policy protocol that the non-COPS-enabled network device can receive and correctly interpret ('non-COPS protocol'). The translation of the policy utilizes a mapping database that delineates predetermined relationships between COPS protocol policies and the non-COPS protocol policies. More specifically, the mapping database can include relationships between COPS protocol policy information base variables, network device roles and characteristics, and non-COPS protocol parameters and associated values. Further, the COPS proxy can be configured to detect and reconcile policy conflicts for one or more network devices.

Method and apparatus for communicating COPS protocol policies to non-COPS-enabled network devices

A method and system for monitoring objects in a plurality of management information bases (MIBs) is provided. The objects required for functioning of an application are identified from the MIBs. The application identifies these objects. The identified OIDs are grouped in a group depending on grouping rules provided by the application. A rate for detecting changes in the group is provided. The changes in the group are detected at the provided rate. A notification is generated on detecting a change in the group. The notification is sent to the application. The notification reports a change in the identified OIDs in the group.

Methods and systems for monitoring objects

A method for operating a computer network includes: a become_root_primary command is issued to a first router to set an ID so that a spanning tree protocol (STP) selects the first router as a primary root router; a become_root_secondary command is issued to a second router to set an ID so that STP selects the second router as a secondary root router; transitioning, in response to failure of the first router, the second router to become the root router. An enable_uplinkfast command is issued to a router, and the router selects a backup designated port for a designated port, and selects a backup root port for a root port. Ports transmit BPDU messages as heartbeat messages, and a failure to detect the BPDU messages results in a backup port assuming the role of a port not detecting the BPDU messages.

Method and apparatus for rapidly reconfiguring computer networks

A method and apparatus for determining a network performance metric in a network is described. The network includes a number of network elements and a number of links. Each of the network elements is coupled to at least one other of the network elements by at least one of the links. The method includes forming a first set of network element pairs, ordering a first number of network element pairs, forming a second set of network element pairs, measuring a measured network performance metric between a first network element pair and computing a computed network performance metric. The first set of network element pairs include a number of pairs of the network elements. The ordering of a first number of network element pairs includes network element pairs in the first set of network element pairs. The second set of network element pairs includes network element pairs in the first set of network element pairs. The measurement is taken between a first network element pair. The first network element pair includes a first network element and a second network element of one of the network element pairs in the second set of network element pairs. The computed network performance metric is computed between a second network element pair using the measured network performance metric. The second network element pair includes a first network element and a second network element of the network element pair in the first set of network element pairs.

Method and apparatus for estimating delay and jitter between many network routers using measurements between a preferred set of routers

A method is disclosed for Simple Network Management Protocol (SNMP) bulk information processing. A request for a plurality of object instances stored in a storage space is received. The request specifies a condition and a maximum number of repetitions. The values of one or more object instances of the plurality of object instances are retrieved. The retrieval of object instance values is terminated when the condition is satisfied even though the maximum number of repetitions is not reached. For example, the condition may be specified by one or more pairs of Object Identifier (OID) values, wherein each pair is represented by a starting OID value and an ending OID value. In this example, the condition is satisfied when an OID value of an object instance that is retrieved is not lexicographically between the starting OID value and the ending OID value of any pair of the one or more pairs.

Method and apparatus for processing simple network management protocol (SNMP) requests for bulk information

A method and apparatus for auto-configuring layer 3 intermediate devices in computer networks by extending the Dynamic Host Configuration Protocol (DHCP). The devices generate, transmit and receive DHCP messages having novel options embedded therein. The options permit a layer 3 device to request and receive from a DHCP server a unique, overall IP address that may be assigned to the device. The device may also request and receive one or more IP subnets and corresponding IP addresses for each of its interfaces. The device may further receive the routing protocols to be used on the various subnets. The layer 3 device can thus be auto-configured with IP configuration parameters, including IP subnets, IP addresses and routing protocols without the time-consuming, manual involvement of a network administrator.

Method and apparatus for auto-configuring layer three intermediate computer network devices

A solution is provided wherein physical link parameters may be negotiated after a link is brought up by having the two devices involved in the link exchange identifiers when the link is initially brought up. These identifiers may be saved in the devices and then utilized upon receipt of subsequent physical link parameter negotiation packets to ensure that these packets are received by a partner who is connected via a physical link.

Verifying packets received over a physical link

A system for setting expressions at an agent including a processor configured to receive a SNMP message from a management station specifying objects for notifications supported by the agent and expressions based on the objects, set expressions for the notification, evaluate expressions when the notification containing the expression is generated, and send the notification to the management station.

Method and system for setting expressions in network management notifications

Growing community of inventors

San Jose, CA, United States of America

Keith McCloghrie