Cisco Technology, Inc.

Graphiant, Inc.

Mandeep Rohilla

Ijsbrand Wijnands

Stefan Olofsson

Neale Ranns

Amro A Younes

Cameron Ferdinands

Methods for establishing a stateless extranet in a secure communication network include transmitting a consumer NHOP to a provider CPE from a consumer CPE in a control plane. The consumer NHOP is associated with at least one attribute of an NHOP, including an encryption key available with the consumer CPE, to establish a secure communication tunnel in a data plane. The consumer CPE receives a service definition over the control plane associated with a service available with the provider CPE. A service anchor point is created based on an identifier of the service definition. A network address translation (NAT) IP request is transmitted to the provider CPE. The consumer CPE receives a NAT IP from the provider CPE in response to the NAT IP request. The NAT IP is associated with the service anchor point of the consumer CPE. A stateless service is thereby instantiated on the consumer CPE.

System and method for instantiation of stateless extranets

Embodiments of the present invention allow authorization for a particular device or user to have access into a particular network so as to be bound to a specific domain or VLAN (virtual local area network). When authorization is tied to a domain, several devices can be authenticated into a single physical port of a network access device (e.g., access switch) and still only be given access to the one or more domam(s) or VLAN(s) that they are authorized to access based on their individual independent authorization outcomes.

Apparatus and methods for authenticating voice and data devices on the same port

Growing community of inventors

London, United Kingdom

Mandeep Rohilla