Cisco Technology, Inc.

Mingqi Deng

Joseph F Mann

Aravind Sitaraman

Thomas Anthony Roden

Leslie Alan Thomas

David N Still

Samuel G Henderson

Vinaychandra Shankarkumar

An apparatus is provided in one example embodiment and it includes a first node coupled to an active endpoint and a standby endpoint. The first node communicates with a second node. When the active endpoint experiences a failure, the standby endpoint is activated such that a communication involving the second node continues. The standby endpoint communicates a complete window's worth of packets to the second node after the failure, the window's worth of packets including a last known sequence number acknowledged by the second node. In more specific embodiments, the first node is an L2TP network server (LNS) and the second node is an L2TP access concentrator (LAC). The last known sequence number was check pointed by the active endpoint to the standby endpoint.

System and method for providing recovery and resynchronization for a tunneling protocol

A method for providing remote management and maintenance of a node or service within a data communications network that is activated by the data communications network management system's receipt of signals of an abnormal condition at a node or service or failure to receive operational status signals from a node or service. A control adapter running on a node within a Point of Presence is started. The control adapter is capable of starting all service adapters associated with all services running on the node. Operational status signals and abnormal condition signals are transmitted from the control adapter and service adapters on to an information bus. If a network management control host receives abnormal condition signals, notification is sent to a remote system administrator that alerts of an error experienced by a node or service. If a network management control host fails to receive operational status signals, notification is sent to a remote system administrator that no signals are being received from a node or service. The system administrator can take appropriate remote action to rectify the problem. The integration of a manually started node or service into a data communications network management system is achieved by manually implementing, at a Point of Presence within a data communications network, a node or service that has an adapter running on it and is in communication with an information bus. The node or service begins signalling operational status upon implementation. These signals are not recognized by network management control hosts. The network management control host transmits signals asking the newly started node or service for identification. The node or service receives the identity request and transmits signals back to the network management control host.

Remote system administration and seamless service integration of a data communication network management system

A method of securely communicating a network address of a client that issues service requests to a first server that proxies the service requests for a second server. A network address of the client is received. A processor determines whether a first network address of the first server is equal to a second network address of the second server. The network address of the client is sent from the first server to the second server in a secure request message only when the first network address of the first server is equal to the second network address of the second server. Accordingly, a secure communications protocol is provided in which an address of a requesting client, e.g., an IP address, is passed in the protocol only among a responding server and its proxy, thereby preventing interception of the client IP address by unauthorized processes. By enforcing a policy that permits the network address of an originating host to pass from a first server to a second server only when the network address of the second server meets specified criteria (e.g., it is the same network address as that of the first server), the originating host address can be passed securely through a proxy server.

Selectively passing network addresses through a server

A method and apparatus for using a session identifier to identify a specific data communications session between an apparatus and an external apparatus is disclosed. When a data communications session is initiated between the apparatus and an external apparatus, the external apparatus sends authenticating information to the apparatus. The apparatus uses the authenticating information to determine the identity and the privileges of the external apparatus for the particular session. A unique session identifier is created by the apparatus, and the session identifier is associated with the external apparatus's identity and privileges. The session identifier is passed between the apparatus and the external apparatus with each subsequent data communication in the session until the session is terminated. The apparatus uses the session identifier received with the data communications to identify the external apparatus and its privileges and allocate resources accordingly. The session identifier is encoded using a six bit code, thereby making it compatible with the Internet e-mail protocol and while also optimizing data compression. The encoded session identifier may be transmitted by appending it to a URL like a query string.

Growing community of inventors

Mountain View, CA, United States of America

Mingqi Deng