Cisco Technology, Inc.

Raman Shankara Krishnan

John T Chapman

Ralph Droms

Madhu Sudan

Sanjeev Hemantkumar Desai

Mark E Millet

Manjunath Sreedhara Bangalore

Amit Surendra Singh

Chrisanto De Jesus Leano

Prabandham Madan Gopal

Tin Phan

An apparatus may include a port to receive a ranging request from a cable modem and a processor in communication with the port. The processor may assign a service identifier to the cable modem, match the service identifier with a link layer address of the cable modem, receive a router advertisement and comparing the source link layer address from the router advertisement to the link layer address of the cable modem, and determine if the link layer address of the cable modem is the same as the source link layer address.

Use of IPv6 in access networks

A unified access control component (UACC) can maintain information relating to network access information and physical location information associated with respective users who may access a network that can include network resources (e.g., applications, information). The UACC can cross reference the network access information (e.g., user network access events, credentials, and policy) and physical location information (e.g., user physical access events, credentials, and policy) and can generate and enforce a unified network access policy based on network access information and physical location information associated with a particular user. After network access privileges have been granted to a user, the UACC can continue to monitor the user. The UACC can include a dynamic authentication component that can request a user re-authenticate if a change in the physical location and/or network access associated with the user is detected, such that a re-computation of network access privileges is desired.

Physical security triggered dynamic network authentication and authorization

An embodiment method may comprise establishing a link layer connection to an access server, obtaining a management address, wherein the management address is at least one of an IPv6 and an IPv4 address, obtaining a TFTP server address, wherein the server address is either IPv6 or IPv4, downloading a configuration file from the TFTP server, registering with the access server as IPv6 capable, maintaining an IP address/prefix-MAC mapping database, and determining whether the IPv6 address belongs to a particular media access control (MAC) address based on the IP address/prefix-MAC mapping database.

Methods and apparatus are provided for enhancing security and features during cable modem configuration. According to various embodiments, a cable network head end is configured to ensure that a cable modem subscriber registers with its assigned configuration profile. Techniques for verifying parameters in a received configuration profile, enhancing authentication, preventing access to provisioning servers, securing communications, and enhancing feature sets are provided.

Growing community of inventors

Cupertino, CA, United States of America

Raman Shankara Krishnan