Nortel Networks Corporation

Ciena Corporation

Fortinet, Inc.

Simon Bryden

Geoffrey Mattson

Marcel Wiget

Robert Pluim

Michael Tate

Gil Tene

Shyam Prasad Pillalamarri

Bryan Gleeson

Reinaldo Penno Filho

Systems, devices, and methods are discussed for leveraging SD-WAN's property of redundant independent paths to enable out of band key exchange using the collection of available paths, dynamically managing link failures to keep the separation whenever possible, and/or signaling availability of quantum-safe data transfer to SD-WAN to enable quantum-safety to be used in SD-WAN policy decisions.

Systems and methods for enhanced key security in an SD-WAN network environment

A platform is connected over a synchronous network using a GFP encapsulation scheme to a provider device having a first Ethernet interface with a customer device, said platform being arranged for exchanging tagged frames including a virtual LAN identifier (VID) with a service unit over a second Ethernet interface. If an error condition is detected at a GFP port of the platform, a correspondence is retrieved between said GFP port and a VID and a deregistration message including said VID is forwarded to the service unit. If an error condition is detected at the second Ethernet interface responsive to reception of a deregistration message including a VID from the service unit, a correspondence is retrieved between said VID and a GFP port and said deregistration message is forwarded through said GFP port to the provider device in a GFP error message. When several Ethernet interfaces concentrated by a bridge face the provider device, another VID is taken into account in the correspondence retrieving.

Signaling methods for telecommunicaton system for exchanging frames over ethernet interfaces and devices for implementing such methods

A Multicast-Enabled Address Resolution Protocol (ME-ARP) is disclosed. This ME-ARP allows the building of independent IP based Virtual Private LAN segments (VPLS) over a multicast enabled IP backbone using stateless tunnels and optimal VPLS traffic forwarding. Each VPLS has an associated IP subnet which is completely independent from other VPLS or the underlying IP backbone itself. Each Customer Premises Equipment (CPE) device needs only to be configured with a VPLS identifier and its serving IP subnet per VPLS designated interface.

Multi-cast enabled address resolution protocol (ME-ARP)

Data packets are transmitted from a network device having plural network interfaces. One of the plural network interfaces is designated for receiving data packets from a source address. First and second data packets are received from a device at the source address. It is determined if the second data packet was received over a network interface on the network device other than the designated network interface. If the second data packet was received over a network interface other than the designated network interface, it is determined if the first and second data packets were received within a predetermined period of time. If the first and second data packets were received within the predetermined period of time, the second data packet is discarded. If the first and second data packets were not received within the predetermined period of time, the second data packet is transmitted from the network device and a forwarding table on the network device is updated.

Method of and device for transmitting data packets on a network

A virtual private network (VPN) service is provided through a shared network infrastructure, with customer edge (CE) devices each having a provider edge (PE) interface having a single layer 3 address in the VPN. An address resolution request message is transmitted by a first CE device on plural layer 2 virtual circuits of its PE interface. The address resolution request message including the layer 3 address allocated to a second CE device of the VPN. In response to reception of such request message at the second CE device, an address resolution response message is returned to the first CE device. In response to reception of this response message, the first CE device maps the layer 3 address allocated to the second CE device to a virtual LAN identifier of the layer 2 virtual circuit on which the response message is received.

Address resolution method for a virtual private network, and customer edge device for implementing the method

In one embodiment of the invention, browser plug-in includes a personal content tunnel (PCT) object processor, a PCT resolution module, and a server interface. The PCT object processor processes a PCT object returned by a content server in response to a request from a client. The PCT object contains PCT information. The PCT resolution module resolves a service uniform resource identifier (URI) using the PCT information according to a PCT resolution protocol. The service URI identifies a PCT resolution server. The server interface receives a content URI and a PCT termination point resolved by the PCT resolution server.

Broadband content delivery via personal content tunnel

A system, device, and method for allocating virtual circuits in a communication network allocates a virtual circuit for a particular device, establishes a tunnel for communicating with a second device, and maps the virtual circuit to the tunnel based upon an address resolution request received over either the virtual circuit or the tunnel. Protocol messages received over the virtual circuit are forwarded over the corresponding tunnel. Protocol messages received over the tunnal are forwarded over the corresponding virtual circuit.

Growing community of inventors

La Roquette sur Siagne, France

Simon Bryden