Juniper Networks, Inc.

Siemens Aktiengesellschaft

Mathias Kokot

Jerome Pascal Moisand

Eric Peterson

Brian Sullivan

Prasad Deshpande

Karen Ruben

Sudhir Krishnan

Hermann J Rodler

Thomas Michael Mistretta

Dan Bergman

Sanjay Kalra

Sanjay Wadhwa

Thomas A Lemaire

Colby Barth

Jeelani Syed

John Liddy

Vitali Vinokour

John C Scano

Steven P Onishi

Thomas Gemmer

Ryan Ross

Jason P Poirier

Linda M Cabeca

Javier Aviles Blanco

Gregory Heidelberger

Denis Henk DeRuijter

Kurt Melden

Paul Raison

John Gibbons

Ivan Dean Bogdanovic

Harsha Srinath

Gregory M Dalle

Margaret Zielinski

Umesh Mangla

Derek Harkness

Suresh R Thesayi

Thomas LeMaire

A stateful application gateway redundancy system and method. Configuration information defines a service processing unit on a service gateway and associates a first redundancy set and a second redundancy set with the service processing unit, wherein the first and the second redundancy sets include a master redundancy state, a standby redundancy state and one or more redundancy policies, including at least one redundancy policy defining actions to be taken on occurrence of a redundancy event associated with the respective redundancy set. In response to detecting a critical event for the first redundancy set, the service gateway transitions the first redundancy set from the standby redundancy state to the master redundancy state, adds a first signal-route associated with the first redundancy set to a Routing Information Base (RIB) and advertises the first signal-route to routing protocol peer network devices.

N:1 stateful application gateway redundancy model

Network (cloud) based customer premises equipment may receive, over a broadband access circuit, layer 2 traffic from an access device at a customer premises; provide dynamic host configuration protocol (DHCP) services for computing devices at the customer premises, the DHCP services providing Internet Protocol (IP) addresses to the computing devices at the customer premises; and provide network address translation (NAT) services for the computing devices at the customer premises.

Cloud based customer premises equipment

In one example, a network device includes computer-readable storage media configured to store information defining a default dictionary associated with one or more default services provided by the network service, one or more interfaces configured to receive configuration data defining a customer dictionary associated with one or more additional services beyond the one or more default services and a to receive a request to access one of the additional services from a subscriber device, and a control unit configured to determine whether an authentication, authorization, and accounting (AAA) server grants access to the requested one of the additional services to the subscriber device, and to configure forwarding information of the network device to cause network traffic associated with the subscriber device to be forwarded to a service unit to perform the one of the additional services when the AAA server grants access to the subscriber device based on the determination.

Customer extendable AAA framework for network elements

Dynamic subscriber interfaces in a network device are provided. An input port receives data units from multiple subscribers. A primary interface extracts source identifiers from headers associated with the received data units and creates dynamic subscriber interfaces to allocate network device resources to each of the multiple subscribers based on the extracted source identifiers.

Systems and methods for implementing dynamic subscriber interfaces

Network devices, such as a router and a downstream multicast distribution device, may use multiple control channels when setting up a multicast stream for a multicast request. For example, first messages may be transmitted using a first protocol to an upstream device over a first channel, the first messages indicating when a first multicast media stream is being requested by at least one of a number of client devices. Second messages may be transmitted using a second protocol over a second channel, the second messages being transmitted on a per-client basis and each identifying a one of the client devices as requesting the first multicast media stream. By using two control channels to convey the multicast channel requests, the router may obtain visibility into the action of the subscriber and can consequently perform per-subscriber operations such as access-control, bandwidth based admission control, statistics, and QoS adjustment for multicast IPTV streams received by the subscriber.

Multiple control channels for multicast replication in a network

A network layer device controls provision of data link layer functionality by a data link layer device to provide a requested multimedia service to a subscriber. For example, the network layer device may control the performance of multicast elaboration by the data link layer device, or the queuing and forwarding of packets by the data link layer device to facilitate transmission of packets according to a Quality of Service class. The network layer device may send control messages to the data link layer device to dynamically configure a control object stored by the data link layer device, such as multicast filter information or a Quality of Service profile. The network layer device may be a service edge router, and the data link layer device may be a customer premises equipment device, e.g., a modem or wireless access point, or a switch, e.g., a digital subscriber line access multiplier.

Controlling data link layer elements with network layer elements

Techniques for classifying and managing network flows associated with a network service using application classification information and active signaling relay are described. A network device, for example, includes a signaling interceptor and a network flow interface. The signaling interceptor monitors a communication between a customer device and an application server, and identifies a network flow associated with a network service provided to the customer device by the application server. The network flow interface applies a policy to the identified network flow. An active signaling relay module communicates with the application server using data injected within the signaling communications, and utilizes the injected data to further control the network flows and the delivery of the network service.

Managing a network flow using application classification information and active signaling relay

A device may determine, based on layer 2 protocol information of incoming traffic, whether to forward the traffic as layer 2 traffic or terminate the traffic as layer 3 traffic. The device may receive the incoming traffic as packets of a virtual local area network (VLAN) and may analyze a protocol type included in layer 2 header information of the packets to classify, based on the protocol type, the packets as layer 2 output traffic or layer 3 output traffic. The device may transmit, as layer 2 traffic of the VLAN, those of the packets that are classified as layer 2 output traffic, and may terminate, to layer 3 traffic, those of the packets that are classified as layer 3 output traffic.

Mixed mode L2 cross connect and L3 termination at an edge network device

Techniques are described for dynamically configuring an interface in a network service provider. The techniques allow dynamic configuration of, for example, a dual stacked interface that includes both Internet Protocol version 6 (IPv6) and Internet Protocol version 4 (IPv4) on the same layer 2 link. In this way, a customer network having an existing IPv4 connection to a network service provider will be able to run both IPv4 and IPv6 over the same interface. A network device within the network service provider may receive a control packet from a subscriber device. The packet may be received on an ATM hybrid permanent virtual circuit (PVC) that supports multiple interface columns. The network device is capable of auto-sensing multiple packet protocols and may dynamically create multiple interface columns over the same ATM interface based on the encapsulation type of the received packets.

Dynamic interface configuration for supporting multiple versions of a communication protocol

Techniques are described for dynamically building an Ethernet virtual local area network (VLAN) interface in a network device. The techniques allow dynamic building of a second VLAN interface over a first VLAN interface statically built over an Ethernet port configured to support dynamic VLANs in a network device. A network device may receive a plurality of Ethernet packets from subscriber devices and dynamically build a second VLAN interface over the first VLAN interface for each of the subscribers. Once the second VLAN interface is built, the network device dynamically builds interface columns over the second VLAN interface for each protocol associated with the Ethernet packets. The network device may then authenticate a user associated with the plurality of Ethernet packets. Once the user has logged out of the network device, the network device may tear down the interface columns while persistently maintaining the corresponding second VLAN interface.

Dynamic virtual local area network (VLAN) interface configuration

Techniques are described that allow a network device, such as a router, to dynamically build VLAN interfaces based on subscriber information strings included within packets. In particular, the network device comprises an interface controller and a forwarding controller, where the forwarding controller receives the packet over an Ethernet port and forwards the received packet to the interface controller. The packet includes both Ethernet tagging information and a subscriber information string. The interface controller comprises an Ethernet module that dynamically builds a primary virtual local area network (VLAN) sub-interface (PVS) based on the Ethernet tagging information. The Ethernet module also dynamically builds a subscriber VLAN sub-interface (SVS) based on the subscriber information string. The SVS allows the network device to distinguish between subscribers residing on the same VLAN, and, therefore, to provide subscriber specific services.

Dynamic building of VLAN interfaces based on subscriber information strings

Growing community of inventors

West Medford, MA, United States of America

Mathias Kokot