Techniques for using first sign of life at edge nodes for a virtual private network
    1.
    发明授权
    Techniques for using first sign of life at edge nodes for a virtual private network 有权
    在边缘节点使用虚拟专用网络的第一生命符号的技术

    公开(公告)号:US07769037B2

    公开(公告)日:2010-08-03

    申请号:US11145752

    申请日:2005-06-06

    IPC分类号: H04L12/28

    CPC分类号: H04L12/4641

    摘要: A method and apparatus for processing a signal on an intermediate network node at an edge of a provider packet-switched network to support a link-layer virtual private network includes receiving a signal on a particular interface. The particular interface is for a direct communication link to a customer network node outside the provider network. It is determined whether the signal indicates that the particular interface is changing from an inactive state to an active state, whereby the signal is called first sign of life (FSOL). If it is determined that the signal is FSOL, then configuration data is determined for configuring the particular interface for the particular virtual private network. The signal is processed based on the configuration data. These techniques allow a dynamic response to new signals on a customer interface without human intervention by the provider.

    摘要翻译: 一种用于在提供商分组交换网络的边缘处的中间网络节点上处理信号以支持链路层虚拟专用网络的方法和装置包括在特定接口上接收信号。 该特定接口用于与提供者网络之外的客户网络节点的直接通信链路。 确定信号是否指示特定接口从非活动状态改变为活动状态,由此该信号被称为生命的第一标志(FSOL)。 如果确定信号为FSOL,则确定配置数据以配置特定虚拟专用网络的特定接口。 信号根据配置数据进行处理。 这些技术允许在客户界面上对新信号进行动态响应,而不需要提供商的人为干预。

    Techniques for zero touch provisioning of edge nodes for a virtual private network by pushing configuration from a server
    2.
    发明授权
    Techniques for zero touch provisioning of edge nodes for a virtual private network by pushing configuration from a server 有权
    通过从服务器推送配置来为虚拟专用网络的边缘节点进行零触摸配置的技术

    公开(公告)号:US07420933B2

    公开(公告)日:2008-09-02

    申请号:US11143546

    申请日:2005-06-02

    IPC分类号: H04L12/28 H04L12/66

    摘要: A method and apparatus for configuring a network interface to support a virtual private network includes storing configuration data at a server on a host computer on the provider network. It is determined without human intervention whether conditions are satisfied for sending the configuration data to a particular node at an edge of the provider network without receiving a request message from the particular node. If it is determined that conditions are satisfied, then the configuration data is sent to the particular node to cause the particular node to configure a particular interface for supporting a virtual private network over the provider network based on the configuration data. The particular node is different from the host. These techniques allow changes in configuration data to be pushed to provider edge nodes without human intervention.

    摘要翻译: 用于配置网络接口以支持虚拟专用网络的方法和装置包括在提供商网络上的主计算机上的服务器上存储配置数据。 在没有人为干预的情况下确定是否满足条件以将配置数据发送到提供商网络的边缘处的特定节点,而不从特定节点接收到请求消息。 如果确定满足条件,则将配置数据发送到特定节点,以使特定节点基于配置数据配置用于通过提供商网络支持虚拟专用网络的特定接口。 特定节点与主机不同。 这些技术允许配置数据的更改被推送到提供商边缘节点,而无需人为干预。

    Techniques for zero touch provisioning of edge nodes for a virtual private network
    3.
    发明授权
    Techniques for zero touch provisioning of edge nodes for a virtual private network 有权
    用于虚拟专用网络的边缘节点零触发配置的技术

    公开(公告)号:US07535856B2

    公开(公告)日:2009-05-19

    申请号:US11142768

    申请日:2005-06-01

    IPC分类号: H04L12/28

    摘要: A method and apparatus for configuring a network interface to support a virtual private network includes storing configuration data at a server on a host computer on the provider network. It is determined whether conditions are satisfied for sending the configuration data to a particular node at an edge of the provider network. If it is determined that conditions are satisfied, then the configuration data is sent to the particular node to cause the particular node to configure a particular interface for supporting a virtual private network over the provider network based on the configuration data without human intervention. The provider network is a packet-switched network and the particular virtual private network is a link layer virtual private network. The particular node is different from the host. The particular interface is for a direct communication link to a customer network node outside the provider network.

    摘要翻译: 用于配置网络接口以支持虚拟专用网络的方法和装置包括在提供商网络上的主计算机上的服务器上存储配置数据。 确定是否满足条件以将配置数据发送到提供商网络边缘的特定节点。 如果确定满足条件,则将配置数据发送到特定节点,以使特定节点基于配置数据配置用于在提供商网络上支持虚拟专用网络的特定接口,而无需人为干预。 提供商网络是分组交换网络,特定的虚拟专用网络是链路层虚拟专用网络。 特定节点与主机不同。 该特定接口用于与提供者网络之外的客户网络节点的直接通信链路。

    Techniques for customer self-provisioning of edge nodes for a virtual private network
    4.
    发明授权
    Techniques for customer self-provisioning of edge nodes for a virtual private network 有权
    用于虚拟专用网络的边缘节点的客户自供应技术

    公开(公告)号:US07778199B2

    公开(公告)日:2010-08-17

    申请号:US11143551

    申请日:2005-06-02

    摘要: Techniques for configuring a particular network interface on a particular node at an edge of a provider network to support a particular virtual private network include receiving customer input data. The provider network is a packet-switched network and the particular virtual private network is a link layer virtual private network. The customer input data indicates a topology for customer equipment devices outside the provider network on the particular virtual private network, and may include properties for corresponding interfaces that connect the customer equipment devices to the edge nodes. Based on the customer input data, configuration data is determined for configuring the particular interface at the particular node. The particular node is caused to configure the particular interface based on the configuration data without human intervention. Among other effects, these techniques support zero-touch provisioning of virtual private networks.

    摘要翻译: 用于在供应商网络的边缘上的特定节点上配置特定网络接口以支持特定虚拟专用网络的技术包括接收客户输入数据。 提供商网络是分组交换网络,特定的虚拟专用网络是链路层虚拟专用网络。 客户输入数据指示特定虚拟专用网络上的供应商网络之外的客户设备设备的拓扑,并且可以包括将客户设备设备连接到边缘节点的相应接口的属性。 基于客户输入数据,确定配置数据以配置特定节点处的特定接口。 使特定节点在没有人为干预的情况下根据配置数据配置特定接口。 除此之外,这些技术支持虚拟专用网络的零接触配置。

    Techniques for oversubscribing edge nodes for virtual private networks
    5.
    发明授权
    Techniques for oversubscribing edge nodes for virtual private networks 有权
    用于虚拟专用网络超额订阅边缘节点的技术

    公开(公告)号:US08059527B2

    公开(公告)日:2011-11-15

    申请号:US11281269

    申请日:2005-11-16

    IPC分类号: H04L12/26

    摘要: Techniques for operating a network interface include automatically determining whether communications are terminated over a particular attachment circuit on a network interface on an intermediate network node at an edge of a provider network, whereby a sign of death (SOD) on the particular attachment circuit is indicated. The attachment circuit is switched with a particular virtual private network that is a link layer virtual private network (VPN) encapsulated in a higher layer protocol. The provider network is a packet-switched network. The network interface is for a direct communication link to a customer network node outside the provider network. If it is determined that there is an indication of the SOD, then a new network action is initiated in response to the SOD on the particular attachment circuit. These techniques allow for automatic logging of usage, billing, and fault detection, as well as for over-subscription of network resources for multiple VPNs.

    摘要翻译: 用于操作网络接口的技术包括自动确定在提供商网络的边缘处的中间网络节点上的网络接口上的特定附件电路上是否终止通信,从而指示特定附接电路上的死亡符号(SOD) 。 附件电路是以封装在更高层协议中的链路层虚拟专用网(VPN)的特定虚拟专用网络来切换的。 提供商网络是分组交换网络。 网络接口用于与供应商网络之外的客户网络节点的直接通信链路。 如果确定存在SOD的指示,则响应于特定附接电路上的SOD启动新的网络动作。 这些技术允许自动记录使用,计费和故障检测,以及多个VPN的网络资源的超额订阅。

    IPv6 addressing over non-IPv6 systems
    7.
    发明授权
    IPv6 addressing over non-IPv6 systems 有权
    通过非IPv6系统进行IPv6寻址

    公开(公告)号:US08400943B2

    公开(公告)日:2013-03-19

    申请号:US12369436

    申请日:2009-02-11

    IPC分类号: H04L12/28 H04J3/16

    摘要: A system includes an access node having an associated identifier. The access node is configured to insert the identifier into a network connection request. The system includes an IP edge service node connected to the access node and configured to receive the network connection request. The IP edge service node is further configured to store the inserted identifier and to insert the identifier into an Internet protocol version 6 (IPv6) address request transmitted according to dynamic host configuration protocol version 6 (DHCPv6) through an established network connection based on the network connection request. The system further includes a server configured to receive the IPv6 address request and assign an IPv6 address based on the IPv6 address request.

    摘要翻译: 系统包括具有相关标识符的接入节点。 接入节点被配置为将该标识符插入到网络连接请求中。 所述系统包括连接到所述接入节点并被配置为接收所述网络连接请求的IP边缘服务节点。 IP边缘服务节点还被配置为存储插入的标识符,并且将标识符插入到根据动态主机配置协议版本6(DHCPv6)通过基于网络的建立的网络连接发送的因特网协议版本6(IPv6)地址请求 连接请求。 系统还包括配置为接收IPv6地址请求并根据IPv6地址请求分配IPv6地址的服务器。

    Methods and apparatus for establishing a computerized device tunnel connection
    8.
    发明授权
    Methods and apparatus for establishing a computerized device tunnel connection 有权
    用于建立计算机化设备隧道连接的方法和装置

    公开(公告)号:US07673048B1

    公开(公告)日:2010-03-02

    申请号:US10373274

    申请日:2003-02-24

    CPC分类号: H04L12/66 H04L12/4633

    摘要: A client device establishes a first tunnel connection or tunnel, through a public network, with a first gateway of a private network and establishes, through the tunnel connection, a data connection with a destination device within the private network. The first gateway monitors or analyzes the geographic locations of the gateways associated with the private network relative to geographic location of the destination device associated with the data connection. Based upon such the monitoring, the first gateway transmits information to the client device relating to establishment of a second tunnel connection or tunnel with a second gateway of the private network. The client device establishes the second tunnel connection with the second gateway and establishes a data connection with the destination device through the second gateway. By establishing the second tunnel connection with the second gateway, the client device utilizes the bandwidth of the public network to exchange data with the destination device, thereby decreasing data transmission costs to the private network and decreasing private network latency.

    摘要翻译: 客户机设备通过公共网络与专用网络的第一网关建立第一隧道连接或隧道,并且通过隧道连接建立与专用网络内的目的地设备的数据连接。 第一网关监视或分析与专用网相关的网关的地理位置相对于与数据连接相关联的目的地设备的地理位置。 基于这样的监视,第一网关向专用网络的第二网关发送关于建立第二隧道连接或隧道的信息给客户端设备。 客户端设备建立与第二网关的第二隧道连接,并通过第二网关与目的设备建立数据连接。 通过建立与第二网关的第二隧道连接,客户端设备利用公共网络的带宽与目的设备进行数据交换,从而降低私有网络的数据传输成本,降低专网延迟。

    Scalable Virtual Private Local Area Network Service
    9.
    发明申请
    Scalable Virtual Private Local Area Network Service 有权
    可扩展的虚拟专用局域网服务

    公开(公告)号:US20090041038A1

    公开(公告)日:2009-02-12

    申请号:US11834663

    申请日:2007-08-06

    IPC分类号: H04L12/28

    CPC分类号: H04L12/4641 H04L45/50

    摘要: In one embodiment, a method includes receiving a data link layer packet, such as an Ethernet packet, at a local provider edge node in a provider network from a first customer edge node of multiple customer edge nodes connected directly to the local provider edge node. A tunnel data packet for a particular tunneling protocol is generated. The tunnel data packet includes tunnel data that indicates tunnel termination at a different provider edge in the provider network. The tunnel data packet also includes customer identifier data and the data link layer packet. The customer identifier data uniquely indicates a customer associated with the first customer edge node. The tunnel data packet is sent over the provider network.

    摘要翻译: 在一个实施例中,一种方法包括从提供商网络中的本地提供商边缘节点接收来自直接连接到本地提供商边缘节点的多个客户边缘节点的第一客户边缘节点的数据链路层分组,诸如以太网分组。 生成用于特定隧道协议的隧道数据包。 隧道数据包包括指示在提供商网络中的不同提供商边缘处的隧道终止的隧道数据。 隧道数据分组还包括客户标识符数据和数据链路层分组。 客户标识符数据唯一地指示与第一客户边缘节点相关联的顾客。 隧道数据包通过提供商网络发送。

    Techniques for migrating a point to point protocol to a protocol for an access network
    10.
    发明授权
    Techniques for migrating a point to point protocol to a protocol for an access network 有权
    将点对点协议迁移到接入网络的协议的技术

    公开(公告)号:US07483996B2

    公开(公告)日:2009-01-27

    申请号:US11043636

    申请日:2005-01-26

    IPC分类号: G06F15/16 G06F15/173

    摘要: Techniques for exchanging point to point protocol (PPP) information among network nodes using an arbitrary network protocol include determining whether a PPP payload includes PPP control data. If so, then an outbound protocol frame is generated with the PPP control data in a payload and with an outbound protocol type field that indicates PPP control data. The outbound protocol frame is sent to a server which uses the PPP control data. The outbound protocol is different from PPP and from PPP over Ethernet (PPPoE) and from PPP over Asynchronous Transfer Mode (ATM) protocol (PPPoA). The outbound protocol may be Ethernet or ATM Adaptation Layer (AAL) or some other protocol. These techniques allow PPP control plane functionality while utilizing IP over Ethernet for the data plane.

    摘要翻译: 在使用任意网络协议的网络节点之间交换点对点协议(PPP)信息的技术包括确定PPP有效载荷是否包括PPP控制数据。 如果是这样,则在有效载荷中的PPP控制数据和出站协议类型字段生成指示PPP控制数据的出站协议帧。 出站协议帧发送到使用PPP控制数据的服务器。 出站协议与PPP和PPP over Ethernet(PPPoE)不同,PPP与异步传输模式(PPPoA)协议不同。 出站协议可以是以太网或ATM适配层(AAL)或其他一些协议。 这些技术允许PPP控制平面功能,同时在数据平面上使用以太网上的IP。