Juniper Networks, Inc.

Paulo Lima

Greg Sidebottom

Yue Gao

Steffen Ries

Raghavendra Mallya

Robert P Enns

Jason R Pascucci

William P Welch

Craig A Bardenheuer

Philip Austin Shafer

Gregory Allan Sidebottom

Michael Soren Jacobsen

Jason P Poirier

Sherine El-Medani

Gregory M Dalle

Vitaly Dzhitenov

Claudio Lordello

Dean Sheffield

An apparatus may (1) receive, at the service provider's network, at least one flow of network traffic from a remote device included in a user's private network, (2) identify, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user's private network, (3) determine, at least one unique routable address that represents the remote device with respect to the service provider's network based at least in part on a network interface assigned to the user's private network, the potentially non-unique private address, and the address-translation table, and then (4) translate, in response to determining the unique routable address, the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic. Various other apparatuses, systems, and methods are also disclosed.

Systems and methods for virtualizing customer-premises equipment

A computer-implemented method for virtualizing customer-premises equipment may include (1) receiving, at a service provider's network, at least one flow of network traffic from a remote device included in a user's private network, (2) identifying, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user's private network, (3) determining at least one unique routable address that represents the remote device with respect to the service provider's network based at least in part on a network interface assigned to the user's private network and the potentially non-unique private address, and then (4) translating the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic. Various other systems, methods, and computer-readable media are also disclosed.

A network management system is described for assuring that a network device complies with a device-specific configuration policy. One example of the network management system contains one or more business rules that describe a business policy regarding a computer network in a network-independent form. In general, the business rules refer to high-level business requirements and not to device-specific configuration information. The network management system uses the business rule to determine which business policies are currently in force. In addition, the network management system contains one or more network design rules that describe relationship between the business policy and one or more device-specific configuration policies. The network management server uses the network design rules to determine whether to deploy a device-specific configuration policies. In this manner, an administrator or other user may create high-level business rules without regard to particular network devices or topologies, yet device-specific configuration polices are deployed to the network devices to assure compliance even if the network management system is bypassed.

Enforcement of network device configuration policies within a computing environment

In general, the invention is directed to techniques for offloading per-subscriber traffic management from an access gateway to one or more upstream service nodes within a service provider network. For example, as described herein, an upstream service node receives a new packet flow for a subscriber and sends packet flow information, such as a network address, to a session and resource controller (SRC). The SRC maintains a table of subscriber attachment sessions and maps the packet flow information to a subscriber attachment session in the table to obtain a subscriber identifier for a subscriber. The SRC then determines subscriber-specific services to be applied to subscriber data traffic, transforms the services to a set of one or more enforcement policies, and returns the enforcement policies to the service node. In turn, the service node applies the enforcement policies for the subscriber-specific services to the subscriber data traffic in the packet flow.

Subscriber-based network traffic management

A service provider network includes an automated support module that receives stream of network packets from subscribers and separates this streams into packet flows for analysis. The automated support module may be an intermediate device that examines each packet flow to detect subscriber characteristics for each subscriber. The automated support module may apply a set of analysis rules to the detected characteristics to aid diagnosis of reported or potential network errors.

Analyzing network traffic to diagnose subscriber network errors

Growing community of inventors

Kanata, Canada

Paulo Lima