Nortel Networks Corporation

Avaya Inc.

Ramin Taraz

Bakul Khanna

Jing Xiang

Shreedhar Shirgurkar

Vladimir Senkov

Ron Pon

Described are a method and system for seamless roaming of a mobile node during a VPN session. A VPN session between the mobile node and a current VPN server in a network is established and synchronized with at least one fail-over VPN server in the network. An address change message is sent to the current VPN server and the fail-over VPN servers upon roaming of the mobile node. A fail-over VPN server responds with a reply message and is registered as a current VPN server for continuation of the VPN session. To load balance, a load query message is sent to the current VPN server and the fail-over VPN servers. Reply messages include server performance characteristics of the VPN servers. The VPN session can be transferred from the current VPN server to a fail-over VPN server in response to the server performance characteristics.

IP security with seamless roaming and load balancing

To prevent loss of packets due to failover between server systems in which a failover mechanism is provided in a first server system to enable a second server system to failover to the first server system, the first server system includes a first sequence number space that is different from a second sequence number space in the second server system. The first and second sequence number spaces are part of a total sequence number space. After failover from the second server system to the first server system, the first server system sends packets containing sequence numbers in the first sequence number space which are defined by a security protocol.

Handling sequence numbers and/or an anti-replay window after failover between servers

A network device is able to selectively preserving or over-writing user-defined state information during a reboot event using intelligent scripts. In one embodiment, the network device is configured to run a script containing intelligence during a reboot event. The intelligence is able to ascertain the cause of the reboot event and use a script appropriate for the particular reboot event. Additionally, the network device, running the script, is able to ascertain whether any user-defined state information exists, whether that user-defined state information conflicts with any scripted state information, and how any conflict between the user-defined state information and the scripted state information should be resolved.

Growing community of inventors

Lexington, MA, United States of America

Ramin Taraz