Scalable transparent proxy
    2.
    发明授权
    Scalable transparent proxy 有权
    可扩展的透明代理

    公开(公告)号:US08191132B1

    公开(公告)日:2012-05-29

    申请号:US11778350

    申请日:2007-07-16

    IPC分类号: G06F9/00

    CPC分类号: H04L63/0254 H04L63/123

    摘要: A facility for proxying network traffic between a pair of nodes is described. The facility receives packets traveling between the pair of nodes that together constitute a distinguished network connection. For each packet of the connection that is part of a transport protocol setup process, the facility updates a representation of the status of the setup process to reflect the packet, and forwards the packet to its destination without proxying the packet. For each packet of the connection that is subsequent to the setup process, the facility proxies the contents of the packet to the packet's destination.

    摘要翻译: 描述了用于在一对节点之间代理网络流量的设施。 该设施接收在一对组成一个可识别的网络连接的一对节点之间行进的分组。 对于作为传输协议建立过程一部分的连接的每个分组,设施更新设置过程的状态的表示以反映分组,并且将分组转发到其目的地而不代理分组。 对于设置过程之后的连接的每个分组,设备将分组的内容代理到分组的目的地。

    Scalable transparent proxy
    3.
    发明授权
    Scalable transparent proxy 有权
    可扩展的透明代理

    公开(公告)号:US08650632B2

    公开(公告)日:2014-02-11

    申请号:US13457319

    申请日:2012-04-26

    IPC分类号: G06F7/04

    CPC分类号: H04L63/0254 H04L63/123

    摘要: A facility for proxying network traffic between a pair of nodes is described. The facility receives packets traveling between the pair of nodes that together constitute a network connection. For each packet of the connection that is part of a transport protocol setup process, the facility updates a representation of the status of the setup process to reflect the packet, and forwards the packet to its destination without proxying the packet. For each packet of the connection that is subsequent to the setup process, the facility proxies the contents of the packet to the packet's destination.

    摘要翻译: 描述了用于在一对节点之间代理网络流量的设施。 该设施接收在一起构成网络连接的一对节点之间行进的分组。 对于作为传输协议建立过程一部分的连接的每个分组,设施更新设置过程的状态的表示以反映分组,并且将分组转发到其目的地而不代理分组。 对于设置过程之后的连接的每个分组,设备将分组的内容代理到分组的目的地。

    SCALABLE TRANSPARENT PROXY
    4.
    发明申请
    SCALABLE TRANSPARENT PROXY 有权
    可扩展的透明代码

    公开(公告)号:US20120216275A1

    公开(公告)日:2012-08-23

    申请号:US13457319

    申请日:2012-04-26

    IPC分类号: G06F21/00

    CPC分类号: H04L63/0254 H04L63/123

    摘要: A facility for proxying network traffic between a pair of nodes is described. The facility receives packets traveling between the pair of nodes that together constitute a distinguished network connection. For each packet of the connection that is part of a transport protocol setup process, the facility updates a representation of the status of the setup process to reflect the packet, and forwards the packet to its destination without proxying the packet. For each packet of the connection that is subsequent to the setup process, the facility proxies the contents of the packet to the packet's destination.

    摘要翻译: 描述了用于在一对节点之间代理网络流量的设施。 该设施接收在一对组成一个可识别的网络连接的一对节点之间行进的分组。 对于作为传输协议建立过程一部分的连接的每个分组,设施更新设置过程的状态的表示以反映分组,并且将分组转发到其目的地而不代理分组。 对于设置过程之后的连接的每个分组,设备将分组的内容代理到分组的目的地。

    Enabling dynamic authentication with different protocols on the same port for a switch
    6.
    发明授权
    Enabling dynamic authentication with different protocols on the same port for a switch 有权
    在交换机的同一端口上启用不同协议的动态认证

    公开(公告)号:US08522318B2

    公开(公告)日:2013-08-27

    申请号:US12879319

    申请日:2010-09-10

    IPC分类号: H04L9/06 H04L29/06

    摘要: The invention enables a client device that does not support IEEE 802.1X authentication to access at least some resources provided through a switch that supports 802.1X authentication by using dynamic authentication with different protocols. When the client device attempts to join a network, the switch monitors for an 802.1X authentication message from the client device. In one embodiment, if the client fails to send an 802.1X authentication message, respond to an 802.1X request from the switch, or a predefined failure condition is detected the client may be deemed incapable of supporting 802.1X authentication. In one embodiment, the client may be initially placed on a quarantine VLAN after determination that the client fails to perform an 802.1X authentication within a backoff time limit. However, the client may still gain access to resources based on various non-802.1X authentication mechanisms, including name/passwords, digital certificates, or the like.

    摘要翻译: 本发明使得不支持IEEE 802.1X认证的客户端设备通过使用不同协议的动态认证来访问通过支持802.1X认证的交换机提供的至少一些资源。 当客户端设备尝试加入网络时,交换机会监控来自客户端设备的802.1X认证消息。 在一个实施例中,如果客户端不能发送802.1X认证消息,则从交换机响应802.1X请求,或者检测到预定义的故障条件,则客户端可能被认为不能支持802.1X认证。 在一个实施例中,客户端可以在确定客户端在退避时间限制内未能执行802.1X认证之前被初始化为隔离VLAN。 然而,客户端仍然可以基于各种非802.1X认证机制(包括名称/密码,数字证书等)获得对资源的访问。

    ENABLING DYNAMIC AUTHENTICATION WITH DIFFERENT PROTOCOLS ON THE SAME PORT FOR A SWITCH
    7.
    发明申请
    ENABLING DYNAMIC AUTHENTICATION WITH DIFFERENT PROTOCOLS ON THE SAME PORT FOR A SWITCH 有权
    使用不同协议在相同端口进行动态动态认证

    公开(公告)号:US20140123213A1

    公开(公告)日:2014-05-01

    申请号:US13952245

    申请日:2013-07-26

    IPC分类号: H04L29/06

    摘要: The invention enables a client device that does not support IEEE 802.1X authentication to access at least some resources provided through a switch that supports 802.1X authentication by using dynamic authentication with different protocols. When the client device attempts to join a network, the switch monitors for an 802.1X authentication message from the client device. In one embodiment, if the client fails to send an 802.1X authentication message, respond to an 802.1X request from the switch, or a predefined failure condition is detected the client may be deemed incapable of supporting 802.1X authentication. In one embodiment, the client may be initially placed on a quarantine VLAN after determination that the client fails to perform an 802.1X authentication within a backoff time limit. However, the client may still gain access to resources based on various non-802.1X authentication mechanisms, including name/passwords, digital certificates, or the like.

    摘要翻译: 本发明使得不支持IEEE 802.1X认证的客户端设备通过使用不同协议的动态认证来访问通过支持802.1X认证的交换机提供的至少一些资源。 当客户端设备尝试加入网络时,交换机会监控来自客户端设备的802.1X认证消息。 在一个实施例中,如果客户端不能发送802.1X认证消息,则从交换机响应802.1X请求,或者检测到预定义的故障条件,则客户端可能被认为不能支持802.1X认证。 在一个实施例中,客户端可以在确定客户端在退避时间限制内未能执行802.1X认证之前被初始化为隔离VLAN。 然而,客户端仍然可以基于各种非802.1X认证机制(包括名称/密码,数字证书等)获得对资源的访问。

    Enabling Dynamic Authentication With Different Protocols on the Same Port for a Switch
    8.
    发明申请
    Enabling Dynamic Authentication With Different Protocols on the Same Port for a Switch 有权
    在交换机的同一端口上启用不同协议的动态认证

    公开(公告)号:US20100333176A1

    公开(公告)日:2010-12-30

    申请号:US12879319

    申请日:2010-09-10

    IPC分类号: G06F21/00 G06F15/16

    摘要: The invention enables a client device that does not support IEEE 802.1X authentication to access at least some resources provided through a switch that supports 802.1X authentication by using dynamic authentication with different protocols. When the client device attempts to join a network, the switch monitors for an 802.1X authentication message from the client device. In one embodiment, if the client fails to send an 802.1X authentication message, respond to an 802.1X request from the switch, or a predefined failure condition is detected the client may be deemed incapable of supporting 802.1X authentication. In one embodiment, the client may be initially placed on a quarantine VLAN after determination that the client fails to perform an 802.1X authentication within a backoff time limit. However, the client may still gain access to resources based on various non-802.1X authentication mechanisms, including name/passwords, digital certificates, or the like.

    摘要翻译: 本发明使得不支持IEEE 802.1X认证的客户端设备通过使用不同协议的动态认证来访问通过支持802.1X认证的交换机提供的至少一些资源。 当客户端设备尝试加入网络时,交换机会监控来自客户端设备的802.1X认证消息。 在一个实施例中,如果客户端不能发送802.1X认证消息,则从交换机响应802.1X请求,或者检测到预定义的故障条件,则客户端可能被认为不能支持802.1X认证。 在一个实施例中,客户端可以在确定客户端在退避时间限制内未能执行802.1X认证之前被初始化为隔离VLAN。 然而,客户端仍然可以基于各种非802.1X认证机制(包括名称/密码,数字证书等)获得对资源的访问。

    Enabling dynamic authentication with different protocols on the same port for a switch
    9.
    发明授权
    Enabling dynamic authentication with different protocols on the same port for a switch 有权
    在交换机的同一端口上启用不同协议的动态认证

    公开(公告)号:US07810138B2

    公开(公告)日:2010-10-05

    申请号:US11337408

    申请日:2006-01-23

    IPC分类号: H04L9/00 H04L29/06

    摘要: The invention enables a client device that does not support IEEE 802.1X authentication to access at least some resources provided through a switch that supports 802.1X authentication by using dynamic authentication with different protocols. When the client device attempts to join a network, the switch monitors for an 802.1X authentication message from the client device. In one embodiment, if the client fails to send an 802.1X authentication message, respond to an 802.1X request from the switch, or a predefined failure condition is detected the client may be deemed incapable of supporting 802.1X authentication. In one embodiment, the client may be initially placed on a quarantine VLAN after determination that the client fails to perform an 802.1X authentication within a backoff time limit. However, the client may still gain access to resources based on various non-802.1X authentication mechanisms, including name/passwords, digital certificates, or the like.

    摘要翻译: 本发明使得不支持IEEE 802.1X认证的客户端设备通过使用不同协议的动态认证来访问通过支持802.1X认证的交换机提供的至少一些资源。 当客户端设备尝试加入网络时,交换机会监控来自客户端设备的802.1X认证消息。 在一个实施例中,如果客户端不能发送802.1X认证消息,则从交换机响应802.1X请求,或者检测到预定义的故障条件,则客户端可能被认为不能支持802.1X认证。 在一个实施例中,客户端可以在确定客户端在退避时间限制内未能执行802.1X认证之前被初始化为隔离VLAN。 然而,客户端仍然可以基于各种非802.1X认证机制(包括名称/密码,数字证书等)获得对资源的访问。