Alcatel Lucent

L Michele Goodwin

David Elie-Dit-Cosaque

Laurence Rose

Girish Chiruvolu

Andrew Snowden Lange

Jessy Victor Rouyer

Ljubisa Tancevski

Anthony Chow

Jean-Francois Cartier

Minka Nikolova

Vincent Vermeulen

A method comprises an operation for facilitating authentication of a client device attempting to connect to a port of a network element. Facilitating authentication includes determining whether the client device is configured for being authenticated using a first authentication mechanism and, in response to determining that the client device is not configured for being authenticated using the first authentication mechanism, determining whether the client device is configured for being authenticated using at least one other authentication mechanism. For each one of the authentication mechanisms, an operation is provided for providing the client device with network connectivity dependent upon a respective first classification policy structure in response to the client device being successfully authenticated and an operation is provided for providing the client device with network connectivity dependent upon a respective second classification policy structure different that the first classification policy structure in response to the client device failing to be successfully authenticated.

Facilitating heterogeneous authentication for allowing network access

Example embodiments are directed to methods of configuring a virtual private local area network service for an enterprise. At least one method includes assigning a virtual private local area network instance to a first node within a network. A first node attempts to establish a label distribution protocol session between the first node and at least one other node within the network based on an interior gateway protocol map. The interior gateway protocol map identifies the at least one other node and nodes connected to the at least one other node. The virtual private local area network service is established based on the label distribution protocol sessions that are established.

Enterprise virtual private LAN services

Customer virtual local area networks (C-VLANs) connecting multiple LAN segments are set up through a provider network (). Provider edge bridges (PEs) are coupled to customer edge bridges (CEs) to provide a transparent link between LAN segments. To determine whether a backdoor link is used in the C-VLAN topology, PEs monitor MAC address from a predetermined time after a TCN is received to determine if there are contradictory addresses or new addresses relative to the existing MAC address tables (or forwarding databases) that are indicative of a backdoor link. If so, an unlearning message is sent to bridges in the provider domain. In another embodiment, CEs set a snoop bit to indicate which TCNs must be snooped.

Method and apparatus for updating provider domain due to customer TCNs

Growing community of inventors

Westlake Village, CA, United States of America

L Michele Goodwin