IPv6 ADDRESSING OVER NON-IPv6 SYSTEMS
    31.
    发明申请
    IPv6 ADDRESSING OVER NON-IPv6 SYSTEMS 有权
    IPv6寻址非IPv6系统

    公开(公告)号:US20100202321A1

    公开(公告)日:2010-08-12

    申请号:US12369436

    申请日:2009-02-11

    IPC分类号: H04L12/28

    摘要: A system includes an access node having an associated identifier. The access node is configured to insert the identifier into a network connection request. The system includes an IP edge service node connected to the access node and configured to receive the network connection request. The IP edge service node is further configured to store the inserted identifier and to insert the identifier into an Internet protocol version 6 (IPv6) address request transmitted according to dynamic host configuration protocol version 6 (DHCPv6) through an established network connection based on the network connection request. The system further includes a server configured to receive the IPv6 address request and assign an IPv6 address based on the IPv6 address request.

    摘要翻译: 系统包括具有相关标识符的接入节点。 接入节点被配置为将该标识符插入到网络连接请求中。 所述系统包括连接到所述接入节点并被配置为接收所述网络连接请求的IP边缘服务节点。 IP边缘服务节点还被配置为存储插入的标识符,并且将标识符插入到根据动态主机配置协议版本6(DHCPv6)通过基于网络的建立的网络连接发送的因特网协议版本6(IPv6)地址请求 连接请求。 系统还包括配置为接收IPv6地址请求并根据IPv6地址请求分配IPv6地址的服务器。

    Techniques for authenticating a subscriber for an access network using DHCP
    32.
    发明授权
    Techniques for authenticating a subscriber for an access network using DHCP 有权
    使用DHCP验证访问网络的用户的技术

    公开(公告)号:US07624181B2

    公开(公告)日:2009-11-24

    申请号:US11362296

    申请日:2006-02-24

    IPC分类号: G06F15/173 G06F15/16

    摘要: Techniques for authenticating a user for access to an IP network include receiving from the user's host a DHCP request which includes user identifier data. A random challenge value is determined and sent to the user's host in a DHCP message format. A response message that includes a response value is received from the user's host in DHCP format. A verification value is determined based on a password value associated with the user identifier value in an AAA server and the current challenge value using a secure process that renders impractical an attempt to derive the password. If it is determined that the response value does not match the verification value, then a DHCP offer is prevented from being sent to the user's host in response to the DHCP request. Thus, a user is authenticated using DHCP instead of PPP.

    摘要翻译: 用于验证用户访问IP网络的技术包括从用户的主机接收包括用户标识符数据的DHCP请求。 确定随机挑战值,并以DHCP消息格式发送给用户的主机。 包含响应值的响应消息以DHCP格式从用户主机接收。 基于与AAA服务器中的用户标识符值相关联的密码值和使用不切实际的尝试导出密码的安全过程来确定当前挑战值的验证值。 如果确定响应值与验证值不匹配,则可以防止响应于DHCP请求向DHCP用户的主机发送DHCP报文。 因此,使用DHCP而不是PPP进行身份验证。

    Techniques for encapsulating point to point protocol (PPP) over Ethernet frames
    33.
    发明授权
    Techniques for encapsulating point to point protocol (PPP) over Ethernet frames 有权
    用于通过以太网帧封装点对点协议(PPP)的技术

    公开(公告)号:US07525972B2

    公开(公告)日:2009-04-28

    申请号:US11113086

    申请日:2005-04-22

    IPC分类号: H04J3/22

    摘要: Techniques for negotiating Point-to-Point Protocol (PPP) sessions over an Ethernet network include receiving configuration data that indicates a first node is connected to a second node thorough an Ethernet network that supports Ethernet frame payload sizes larger than 1500 octets. Request data is received at the first node from the second node. The request data indicates a request for PPP communications between the first node and the second node using a requested PPP payload size greater than 1492 octets. A particular PPP payload size greater than 1492 octets is determined. Response data is sent from the first node to the second node. The response data indicates that the particular PPP payload size greater than 1492 octets is to be used for PPP communications between the first node and the second node. These techniques allow better utilization of Ethernet Jumbo, Giant and Baby Giant frames.

    摘要翻译: 通过以太网协商点对点协议(PPP)会话的技术包括接收配置数据,其指示第一节点通过支持以太网帧有效载荷大小大于1500个八位字节的以太网网络连接到第二节点。 在第一节点从第二节点接收请求数据。 请求数据指示在第一节点和第二节点之间使用大于1492个八位字节的请求的PPP有效载荷大小的PPP通信请求。 确定大于1492个八位字节的特定PPP有效载荷大小。 响应数据从第一个节点发送到第二个节点。 响应数据指示大于1492个八位字节的特定PPP有效载荷大小将被用于第一节点和第二节点之间的PPP通信。 这些技术可以更好地利用以太网巨型,巨型和宝贝巨型框架。

    Techniques for encapsulating point to point (PPP) over Ethernet frames
    37.
    发明授权
    Techniques for encapsulating point to point (PPP) over Ethernet frames 有权
    通过以太网帧封装点对点(PPP)技术

    公开(公告)号:US08204080B2

    公开(公告)日:2012-06-19

    申请号:US12431024

    申请日:2009-04-28

    IPC分类号: H04J3/16

    摘要: Techniques for negotiating Point-to-Point Protocol (PPP) sessions over an Ethernet network include receiving configuration data that indicates a first node is connected to a second node thorough an Ethernet network that supports Ethernet frame payload sizes larger than 1500 octets. Request data is received at the first node from the second node. The request data indicates a request for PPP communications between the first node and the second node using a requested PPP payload size greater than 1492 octets. A particular PPP payload size greater than 1492 octets is determined. Response data is sent from the first node to the second node. The response data indicates that the particular PPP payload size greater than 1492 octets is to be used for PPP communications between the first node and the second node. These techniques allow better utilization of Ethernet Jumbo, Giant and Baby Giant frames.

    摘要翻译: 通过以太网协商点对点协议(PPP)会话的技术包括接收配置数据,其指示第一节点通过支持以太网帧有效载荷大小大于1500个八位字节的以太网网络连接到第二节点。 在第一节点从第二节点接收请求数据。 请求数据指示在第一节点和第二节点之间使用大于1492个八位字节的请求的PPP有效载荷大小的PPP通信请求。 确定大于1492个八位字节的特定PPP有效载荷大小。 响应数据从第一个节点发送到第二个节点。 响应数据指示大于1492个八位字节的特定PPP有效载荷大小将被用于第一节点和第二节点之间的PPP通信。 这些技术可以更好地利用以太网巨型,巨型和宝贝巨型框架。

    Simple virtual private network for small local area networks
    38.
    发明授权
    Simple virtual private network for small local area networks 有权
    用于小型局域网的简单虚拟专用网络

    公开(公告)号:US08050267B2

    公开(公告)日:2011-11-01

    申请号:US11676444

    申请日:2007-02-19

    IPC分类号: H04L12/56

    摘要: In one embodiment, a method includes establishing a control channel across a wide area network (WAN) from a first gateway that has a first public internetwork layer (L3) address to a second gateway that has a second public L3 address. Each gateway connects a local area network (LAN) to the WAN. Negotiations over the control channel establish a first set of private L3 addresses for the first LAN and a non-overlapping second set for the second LAN. A different address from the first set is provided for each different node in the first LAN. A discovery packet is received from the first LAN. The discovery packet is encapsulated in a tunnel packet directed to the second public L3 address. The tunnel packet is sent over the WAN to the second gateway which extracts the discovery packet. The second gateway sends the discovery packet over the second LAN.

    摘要翻译: 在一个实施例中,一种方法包括从具有第一公共互联网层(L3)地址的第一网关到具有第二公共L3地址的第二网关的广域网(WAN)建立控制信道。 每个网关将局域网(LAN)连接到WAN。 通过控制信道的谈判为第一LAN建立第一组专用L3地址,为第二LAN建立不重叠的第二组。 为第一LAN中的每个不同节点提供与第一组不同的地址。 从第一LAN接收到发现分组。 发现分组被封装在指向第二公共L3地址的隧道分组中。 隧道数据包通过WAN发送到提取发现数据包的第二个网关。 第二个网关通过第二个LAN发送发现数据包。

    Scalable virtual private local area network service
    39.
    发明授权
    Scalable virtual private local area network service 有权
    可扩展的虚拟专用局域网服务

    公开(公告)号:US07751399B2

    公开(公告)日:2010-07-06

    申请号:US11834663

    申请日:2007-08-06

    IPC分类号: H04L12/28

    CPC分类号: H04L12/4641 H04L45/50

    摘要: In one embodiment, a method includes receiving a data link layer packet, such as an Ethernet packet, at a local provider edge node in a provider network from a first customer edge node of multiple customer edge nodes connected directly to the local provider edge node. A tunnel data packet for a particular tunneling protocol is generated. The tunnel data packet includes tunnel data that indicates tunnel termination at a different provider edge in the provider network. The tunnel data packet also includes customer identifier data and the data link layer packet. The customer identifier data uniquely indicates a customer associated with the first customer edge node. The tunnel data packet is sent over the provider network.

    摘要翻译: 在一个实施例中,一种方法包括从提供商网络中的本地提供商边缘节点接收来自直接连接到本地提供商边缘节点的多个客户边缘节点的第一客户边缘节点的数据链路层分组,诸如以太网分组。 生成用于特定隧道协议的隧道数据包。 隧道数据包包括指示在提供商网络中的不同提供商边缘处的隧道终止的隧道数据。 隧道数据分组还包括客户标识符数据和数据链路层分组。 客户标识符数据唯一地指示与第一客户边缘节点相关联的顾客。 隧道数据包通过提供商网络发送。

    Techniques for establishing subscriber sessions on an access network using DHCP
    40.
    发明授权
    Techniques for establishing subscriber sessions on an access network using DHCP 有权
    使用DHCP在接入网络上建立用户会话的技术

    公开(公告)号:US07568040B2

    公开(公告)日:2009-07-28

    申请号:US11362703

    申请日:2006-02-25

    IPC分类号: G06F15/16 G06F15/173

    摘要: Techniques for supporting subscriber sessions for access to an IP network include receiving from a first node at a different second node, a Dynamic Host Configuration Protocol (DHCP) formatted echo-request message. The echo-request message includes a DHCP option field that holds data that indicates an echo-request type. In response to receiving the echo-request message, the second node sends to the first node a DHCP formatted echo-reply message that corresponds to the echo-request message. The echo-reply message includes a DHCP option field that holds data that indicates an echo-reply type. When received by the first node, the echo-response message causes the first node to determine a connected state with the second node. Point to Point Protocol (PPP) keep-alive messages between a customer premises node and a remote access server gateway to an IP network may be replaced by these DHCP echo-request and echo-reply messages.

    摘要翻译: 用于支持用户会话以访问IP网络的技术包括从不同的第二节点的第一节点接收动态主机配置协议(DHCP)格式的回送请求消息。 回应请求消息包括保存指示回显请求类型的数据的DHCP选项字段。 响应于接收到回波请求消息,第二节点向第一节点发送对应于回显请求消息的DHCP格式的回应应答消息。 回应应答消息包括保存指示回显应答类型的数据的DHCP选项字段。 当由第一节点接收时,回波响应消息使得第一节点确定与第二节点的连接状态。 客户端节点和到IP网络的远程访问服务器网关之间的点对点协议(PPP)保持活动消息可以被这些DHCP回显请求和回应回复消息所取代。