Calix Limited

Catix, Inc.

Shaun Noel Missett

Berkay Baykal

Duane M Butler

Michael W Conner

Christopher Thomas Bernard

Jeffrey Buffum

Harold Ashton Roberts

Ari Sodhi

Tim Joseph Ethen

Steven J Brooks

Michael Oquist

Matthew Kontoff

Allen James Sabean

Zachary Perkins

In general, techniques are described for provisioning network devices in an Ethernet-based access network. For example, an access node located in an Ethernet-based access network positioned intermediate to a back office network and a customer network may implement the techniques. The access node comprises a control unit that discovers a demarcation point device that terminates the access network of the service provider network at the customer network. The control unit of the access node implements an Ethernet protocol to provide layer two network connectivity between the service provider network and the customer network, authenticates the demarcation point device based on a unique identifier assigned to the demarcation point device and, after successfully authenticating the demarcation point device, provisions the demarcation point device.

Provisioning network devices in Ethernet-based access networks

A system comprises a plurality of access nodes configured to provide one or more services to customer equipment; and a plurality of transport elements coupled together to form a network. Each transport element is configured to receive data packets committed to the network by one or more of the other transport elements and to commit data packets to the network, each data packet assigned to one of a plurality of traffic classes. Each respective transport element is further configured to shape a first set of traffic comprising data packets received from another transport element based on the respective traffic class of each data packet and to shape a second set of traffic comprising data packets to be committed to the network by the respective transport element based on the respective traffic class of each data packet, the first set of traffic shaped separately from the second set of traffic. Each respective transport element is further configured to shape the shaped first set of traffic together with the shaped second set of traffic based on respective weights associated with the first set of traffic and the second set of traffic.

System and method for automated quality of service configuration through the access network

An access network comprises a first network interface device coupled to a customer network and configured to provide an interface between the access network and the customer network. The access network also comprises a second network interface device coupled to a core network and configured to provide an interface between the access network and the core network. The first network device is configured to insert a Status Type Length Value (TLV) element into a Continuity Check Message (CCM) to form a modified CCM and to transmit the modified CCM to the second network interface device. The Status TLV element includes fields for at least one of a dying gasp indication from a customer premise equipment or performance monitoring data. The second network interface device is configured to store data from the Status TLV in a database entry associated with an identification number of the first network interface device.

Propagating link status across a network

Systems and methods for measuring frame loss in multipoint networks are provided. In one embodiment, a method for calculating frame loss in a multipoint network is provided. The method comprises: synchronizing local PM frame count bin boundaries across a multipoint network; collecting a first sample of frame count data at a network manager from a first local PM frame count bin for each VLAN Endpoint on the multipoint network; and calculating a frame loss for the multipoint network by accounting for frame ingress and frame egress from the multipoint network based on the first sample of frame count data; wherein the first sample of frame count data is associated with a first period of time defined by the local PM frame count bin boundaries.

Systems and methods for measuring frame loss in multipoint networks

A method of servicing a target device having a matrix barcode comprises analyzing data from a scan of the matrix barcode on the target device to obtain device identification information encoded in the matrix barcode; obtaining secondary information related to the target device; associating the device identification information with the secondary information; and transmitting the device identification information and secondary information over a network to a back office system.

System and method for servicing a device having a matrix barcode

A demarcation point device positioned at a customer network to provide the customer network access to a service provider network. The demarcation point device comprises a control unit that transmits one or more service query data packets on the customer network to test at least one service within the customer network. The control unit receives one or more service reply data packets from the customer network in response to transmitting the service query data packets, and determines one or more service statistics based on one or more of the service query data packets and the service reply data packets.

Determining quality of experience with a network device

In general, techniques are described for providing an isolation virtual local area network (VLAN) for layer two access networks. A server comprising an interface and a control unit may implement the techniques. The interface receives a message that initiates a request for a layer three (L3) network address for use by a client device via an isolation virtual local area network (VLAN) that supports transmitting data from a network device to the server, where the network device is intermediately positioned between the client device and the server. The message includes a layer two (L2) address associated with the client device. The control unit determines whether to allow the client device to access the network and assigns the L3 network address to the client device based on the determination.

Isolation VLAN for layer two access networks

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions ('MAC collisions') may be prevented.

Secure DHCP processing for layer two access networks

Systems and methods for measuring frame loss in multipoint networks are provided. In one embodiment, a method for calculating frame loss comprises: performing a first continuity check message exchange between a first and a plurality of other devices, the first exchange comprises the first device collecting a first set of frame count data from each of the first and other devices, the first set of frame count data associated with a first instance of time by a first sequence identifier; performing a second continuity check message exchange between the first and plurality of other devices, the second exchange comprises the first device collecting a second set of frame count data from the first other devices, the second set of frame count data associated with a second instance of time by a second sequence identifier; and calculating a frame loss measurement by accounting for frame Ingress and frame Egress.

In general, techniques are described for interworking between Ethernet organization, administration, and maintenance (OAM) frames and Asynchronous Transfer Mode (ATM) ATM OAM cells. For example, an access node in an Ethernet and ATM network may implement the techniques. The access node comprises an Ethernet interface that receives an Ethernet OAM Loopback frame from a device within an Ethernet network. The access node includes a control unit that constructs an ATM OAM End-to-End Loopback cell from the Ethernet OAM Loopback frame, and an ATM interface that transmits the ATM OAM End-to-End Loopback cell from the access node towards a virtual circuit connected to a subscriber device to verify connectivity from the originating device within the Ethernet network to the subscriber device within the ATM network.

Ethernet OAM to ATM OAM interworking for loopback capability

Systems and methods for multicast admission control are provided. In one embodiment, a node comprises: a first interface configured to receive a multicast channel access request, from a subscriber interface, including an address for a channel; a memory including a subscriber profile and VLAN configuration data for the network; a processor that identifies a first VLAN corresponding to the address from the VLAN configuration data and determines whether the subscriber is authorized to receive the channel via the first VLAN based on access policy designated by the subscriber profile; wherein the processor further determines whether granting access to the channel violates admission control policy based on predefined bandwidth requirements and/or a stream count limit for the first VLAN; wherein when the subscriber interface is authorized to receive the channel and when granting access to the channel does not violate admission control policy, the processor routes the channel to the subscriber.

Systems and methods for multicast admission control

In general, the disclosure describes network techniques that may automatically assign virtual local area networks (VLANs) to domains in a ring network. In one example, a method includes receiving, by a control node in a ring network, a plurality of data units transmitted by a plurality of transport nodes on the ring network, each data unit comprising profile information, and automatically assigning a VLAN to one of a plurality of domains established on the ring network based on the profile information.

Automated VLAN assignment to domain in ring network

In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Growing community of inventors

Avon, CT, United States of America

Shaun Noel Missett