Alcatel Lucent

Robert Leon Sangroniz

Geoffrey C Stone

John W Bailey

Michael E See

Charles L Panza

Yuri Pikover

Michele Wright Goodwin

Jeffrey Glenn Thomas

Jeremy Lynn Garff

Mark Fine

A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.

Deterministic user authentication service for communication network

A method and apparatus for optimizing multicast traffic in a VLAN-tagged environment is disclosed. The method, implemented by a cross-VLAN switching device, comprises the steps of receiving a multicast stream within a first VLAN of a plurality of VLANs configured thereon, and internally distributing the multicast stream towards substantially all the multicast group members registered at the cross-VLAN switching device to receive the multicast stream. Distribution of the multicast stream preferably comprises the steps of internally routing the multicast stream from the first VLAN to each VLAN in which there is a multicast group member registered to receive the multicast stream and then switching the multicast stream from each VLAN in which it is present in a cross-VLAN switching device to substantially all of the multicast group members registered to receive the multicast stream. In accordance with the invention, only a single copy of a multicast stream propagates across said one or more VLAN-tagged communications links, thereby avoiding one or more duplicative multicast streams that generally occur when there are multicast group members in a plurality of VLANs.

Multicast optimization in a VLAN tagged network

Growing community of inventors

Sandy, UT, United States of America

Robert Leon Sangroniz