Alcatel Lucent

Alcatel

Alcatel-lucent USA Inc.

Alcatel Internetworking, Inc.

Xylan Corporation

Michael E See

John W Bailey

Geoffrey C Stone

Charles L Panza

Yuri Pikover

Robert Leon Sangroniz

Marc Boullet

Christopher Martin

Michele Wright Goodwin

A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.

Deterministic user authentication service for communication network

A system and method are disclosed for automatically registering various system attributes with a VoIP device such as an VoIP phone. The system attributes are provided by a network, preferably an adjacent switching device made aware of the system attributes through one of a number of learning mechanisms. The system attributes may include one or more of the following: the VLAN identification used for VoIP communications in the subnet in which the VoIP phone is connected; the switching device identification, switching device slot, and switching device port number to which the VoIP phone is connected. The switch, slot, and port are used in some embodiments by an IP PBX system to construct a relational database that associates the geographic location of the connection with the IP phone for purposes of reporting the physical location of the VoIP user to emergency response personnel. The system and method for automatically registering various system attributes enables the relational database to be updated prompt and accurate.

Automated voice over IP device VLAN-association setup

A distributed network management system that utilizes policy rules in rendering management decisions. The system includes a policy console that populates and manages network policies in a policy repository. Various network devices coupled to the policy repository download policy rules relevant to the devices for managing network elements associated with each network device. Each network device includes a policy decision module for rendering management decisions for its network elements based on the retrieved network policies. Each network device further includes a policy enforcement module for enforcing the management decisions and controlling the associated network elements based on the policies.

Distributed network management system using policies

A method, apparatus, and system for managing network devices is disclosed. The method preferably includes the steps of monitoring for a change to the value of one or more local resource properties associated with the managed network device; generating a learning event report comprising the value of at least one of the one or more local resource properties; and transmitting the learning event report to a central data store. At the central data store, the value of the one or more local resource properties are recorded and made available to the network management system for asynchronous processing. The central data store is preferably a directory server. The apparatus preferably includes a local resource manager for monitoring the value of one or more local resource properties; detecting the changes to one or more local resource properties; generating one or more learning event reports including the changes to the local resource properties; and transmitting the one or more learning event reports to the central data store. The invention reduces the burden on the network management system to regularly poll the numerous devices under management while improving accuracy.

Network resource management in a network device

Growing community of inventors

Chapel Hill, NC, United States of America

Michael E See