IPv6 addressing over non-IPv6 systems
    5.
    发明授权
    IPv6 addressing over non-IPv6 systems 有权
    通过非IPv6系统进行IPv6寻址

    公开(公告)号:US08400943B2

    公开(公告)日:2013-03-19

    申请号:US12369436

    申请日:2009-02-11

    IPC分类号: H04L12/28 H04J3/16

    摘要: A system includes an access node having an associated identifier. The access node is configured to insert the identifier into a network connection request. The system includes an IP edge service node connected to the access node and configured to receive the network connection request. The IP edge service node is further configured to store the inserted identifier and to insert the identifier into an Internet protocol version 6 (IPv6) address request transmitted according to dynamic host configuration protocol version 6 (DHCPv6) through an established network connection based on the network connection request. The system further includes a server configured to receive the IPv6 address request and assign an IPv6 address based on the IPv6 address request.

    摘要翻译: 系统包括具有相关标识符的接入节点。 接入节点被配置为将该标识符插入到网络连接请求中。 所述系统包括连接到所述接入节点并被配置为接收所述网络连接请求的IP边缘服务节点。 IP边缘服务节点还被配置为存储插入的标识符,并且将标识符插入到根据动态主机配置协议版本6(DHCPv6)通过基于网络的建立的网络连接发送的因特网协议版本6(IPv6)地址请求 连接请求。 系统还包括配置为接收IPv6地址请求并根据IPv6地址请求分配IPv6地址的服务器。

    Techniques for replacing point to point protocol with dynamic host configuration protocol
    6.
    发明授权
    Techniques for replacing point to point protocol with dynamic host configuration protocol 有权
    用动态主机配置协议替代点对点协议的技术

    公开(公告)号:US07853708B2

    公开(公告)日:2010-12-14

    申请号:US11362702

    申请日:2006-02-25

    IPC分类号: G06F15/16 G06F15/177

    摘要: Techniques for providing remote access to a service provider network include exchanging multiple Dynamic Host Configuration Protocol (DHCP) formatted messages instead of any Point to Point Protocol (PPP) message to provide all PPP functions for accessing a service provider network from a customer node. The service provider network is on provider premises and the customer node is on customer premises different from the provider premises. The DHCP format is used to exchange authentication messages, user profile data on Authentication, Authorization and Accounting (AAA) servers, or session keep-alive echo messages, alone or in some combination. When all are message types are combined, these techniques provide a remote access server (RAS) with the capability to perform all functions presently provided by PPP processes. In some combinations, these techniques allow a modified DHCP server to replace a legacy AAA server.

    摘要翻译: 用于提供对服务提供商网络的远程访问的技术包括交换多个动态主机配置协议(DHCP)格式的消息而不是任何点对点协议(PPP)消息,以提供用于从客户节点访问服务提供商网络的所有PPP功能。 服务提供商网络在提供商场所,并且客户节点在与提供商场所不同的客户驻地上。 DHCP格式用于单独或以某种组合交换认证消息,认证,授权和计费(AAA)服务器上的用户配置文件数据或会话保持活动的回显消息。 当所有消息类型都被组合时,这些技术提供具有执行PPP进程目前提供的所有功能的能力的远程访问服务器(RAS)。 在某些组合中,这些技术允许修改的DHCP服务器来替代传统的AAA服务器。

    IPv6 ADDRESSING OVER NON-IPv6 SYSTEMS
    7.
    发明申请
    IPv6 ADDRESSING OVER NON-IPv6 SYSTEMS 有权
    IPv6寻址非IPv6系统

    公开(公告)号:US20100202321A1

    公开(公告)日:2010-08-12

    申请号:US12369436

    申请日:2009-02-11

    IPC分类号: H04L12/28

    摘要: A system includes an access node having an associated identifier. The access node is configured to insert the identifier into a network connection request. The system includes an IP edge service node connected to the access node and configured to receive the network connection request. The IP edge service node is further configured to store the inserted identifier and to insert the identifier into an Internet protocol version 6 (IPv6) address request transmitted according to dynamic host configuration protocol version 6 (DHCPv6) through an established network connection based on the network connection request. The system further includes a server configured to receive the IPv6 address request and assign an IPv6 address based on the IPv6 address request.

    摘要翻译: 系统包括具有相关标识符的接入节点。 接入节点被配置为将该标识符插入到网络连接请求中。 所述系统包括连接到所述接入节点并被配置为接收所述网络连接请求的IP边缘服务节点。 IP边缘服务节点还被配置为存储插入的标识符,并且将标识符插入到根据动态主机配置协议版本6(DHCPv6)通过基于网络的建立的网络连接发送的因特网协议版本6(IPv6)地址请求 连接请求。 系统还包括配置为接收IPv6地址请求并根据IPv6地址请求分配IPv6地址的服务器。

    Techniques for authenticating a subscriber for an access network using DHCP
    8.
    发明授权
    Techniques for authenticating a subscriber for an access network using DHCP 有权
    使用DHCP验证访问网络的用户的技术

    公开(公告)号:US07624181B2

    公开(公告)日:2009-11-24

    申请号:US11362296

    申请日:2006-02-24

    IPC分类号: G06F15/173 G06F15/16

    摘要: Techniques for authenticating a user for access to an IP network include receiving from the user's host a DHCP request which includes user identifier data. A random challenge value is determined and sent to the user's host in a DHCP message format. A response message that includes a response value is received from the user's host in DHCP format. A verification value is determined based on a password value associated with the user identifier value in an AAA server and the current challenge value using a secure process that renders impractical an attempt to derive the password. If it is determined that the response value does not match the verification value, then a DHCP offer is prevented from being sent to the user's host in response to the DHCP request. Thus, a user is authenticated using DHCP instead of PPP.

    摘要翻译: 用于验证用户访问IP网络的技术包括从用户的主机接收包括用户标识符数据的DHCP请求。 确定随机挑战值,并以DHCP消息格式发送给用户的主机。 包含响应值的响应消息以DHCP格式从用户主机接收。 基于与AAA服务器中的用户标识符值相关联的密码值和使用不切实际的尝试导出密码的安全过程来确定当前挑战值的验证值。 如果确定响应值与验证值不匹配,则可以防止响应于DHCP请求向DHCP用户的主机发送DHCP报文。 因此,使用DHCP而不是PPP进行身份验证。

    Techniques for using first sign of life at edge nodes for a virtual private network
    10.
    发明授权
    Techniques for using first sign of life at edge nodes for a virtual private network 有权
    在边缘节点使用虚拟专用网络的第一生命符号的技术

    公开(公告)号:US07769037B2

    公开(公告)日:2010-08-03

    申请号:US11145752

    申请日:2005-06-06

    IPC分类号: H04L12/28

    CPC分类号: H04L12/4641

    摘要: A method and apparatus for processing a signal on an intermediate network node at an edge of a provider packet-switched network to support a link-layer virtual private network includes receiving a signal on a particular interface. The particular interface is for a direct communication link to a customer network node outside the provider network. It is determined whether the signal indicates that the particular interface is changing from an inactive state to an active state, whereby the signal is called first sign of life (FSOL). If it is determined that the signal is FSOL, then configuration data is determined for configuring the particular interface for the particular virtual private network. The signal is processed based on the configuration data. These techniques allow a dynamic response to new signals on a customer interface without human intervention by the provider.

    摘要翻译: 一种用于在提供商分组交换网络的边缘处的中间网络节点上处理信号以支持链路层虚拟专用网络的方法和装置包括在特定接口上接收信号。 该特定接口用于与提供者网络之外的客户网络节点的直接通信链路。 确定信号是否指示特定接口从非活动状态改变为活动状态,由此该信号被称为生命的第一标志(FSOL)。 如果确定信号为FSOL,则确定配置数据以配置特定虚拟专用网络的特定接口。 信号根据配置数据进行处理。 这些技术允许在客户界面上对新信号进行动态响应,而不需要提供商的人为干预。