专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07733869B2 Providing VPLS-like service over native ATM networks 有权
标题翻译：通过本地ATM网络提供类似VPLS的服务
公开(公告)号：US07733869B2
公开(公告)日：2010-06-08
申请号：US10731091
申请日：2003-12-10
申请人： John Fischer , Shay Nahum , Carl Rajsic , Shawn McAllister
发明人： John Fischer , Shay Nahum , Carl Rajsic , Shawn McAllister
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L12/5601 , H04L2012/5618
摘要： A method and apparatus for emulating VPLS within an ATM network. Provider Edge devices are configured for VPLS connections. For each pair of provider edge devices supporting the same VPLS ID, one device establishes a virtual circuit between the pair. Thus, a full mesh of virtual circuits is established between provider edge devices, and a VPLS-like service can be offered to users without having to implement MPLS. Establishing the virtual circuits within a PNNI hierarchy maybe facilitated by each provider edge device propagating through the hierarchy an information group containing an association between the ATM address of the device and a VPLS ID, so that each provider edge device learns all ATM addresses to be associated with each VPLS ID. The method of advertising ATM addresses can be applied to other services requiring a number of interconnections between provider edge devices, such as Virtual Private Networks.
摘要翻译：一种在ATM网络内仿真VPLS的方法和装置。 Provider Edge设备配置为VPLS连接。对于支持相同VPLS ID的每对提供商边缘设备，一个设备在该对之间建立虚拟电路。因此，在提供商边缘设备之间建立完整的虚拟电路网格，并且可以向用户提供类似VPLS的服务，而不必实现MPLS。在PNNI层级内建立虚拟电路可以由每个提供商边缘设备通过层级传播包含设备的ATM地址和VPLS ID之间的关联的信息组来促进，使得每个提供商边缘设备学习要关联的所有ATM地址每个VPLS ID。广告ATM地址的方法可以应用于在诸如虚拟专用网络的提供商边缘设备之间需要多个互连的其他服务。

2. 发明申请

US20050129024A1 Providing VPLS-like service over native ATM networks 有权
标题翻译：通过本地ATM网络提供类似VPLS的服务
公开(公告)号：US20050129024A1
公开(公告)日：2005-06-16
申请号：US10731091
申请日：2003-12-10
申请人： John Fisher , Shay Nahum , Carl Rajsic , Shawn McAllister
发明人： John Fisher , Shay Nahum , Carl Rajsic , Shawn McAllister
IPC分类号： H04L12/56
CPC分类号： H04L12/5601 , H04L2012/5618
摘要： A method and apparatus are provided for emulating VPLS within an ATM network. Provider Edge devices are configured for the VPLS connections. Each provider edge device advertises its configured VPLS IDs to other provider edge devices by propagating an information group up the PNNI hierarchy, the information group containing an association between an ATM address of the provider edge device and the VPLS ID. Information groups are propagated back down the PNNI hierarchy, so that each lowest level node learns all ATM addresses to be associated with each VPLS ID. For each pair of provider edge devices supporting the same VPLS ID, one of the provider edge devices establishes a virtual circuit between the pair. In this way, a mesh of virtual circuits is established between provider edge devices, and a VPLS-like service can be offered to users without having to implement MPLS. The method of advertising ATM addresses can also be applied to other services requiring a number of interconnections between provider edge devices, such as Virtual Private Networks.
摘要翻译：提供了一种在ATM网络内仿真VPLS的方法和装置。为VPLS连接配置了Provider Edge设备。每个提供商边缘设备通过将信息组向上传播到PNNI层级来向其他提供商边缘设备发布其配置的VPLS ID，所述信息组包含提供商边缘设备的ATM地址与VPLS ID之间的关联。信息组被传播回PNNI层次结构，使得每个最低级节点学习与每个VPLS ID相关联的所有ATM地址。对于支持相同VPLS ID的每对提供商边缘设备，提供商边缘设备之一在该对之间建立虚拟电路。以这种方式，在提供商边缘设备之间建立虚拟电路网格，并且可以向用户提供类似VPLS的服务，而不必实现MPLS。广告ATM地址的方法也可以应用于需要诸如虚拟专用网络的提供商边缘设备之间的多个互连的其他服务。

3. 发明授权

US07184440B1 Multi-protocol switch and method therefore 有权
标题翻译：因此，多协议交换机和方法
公开(公告)号：US07184440B1
公开(公告)日：2007-02-27
申请号：US09625586
申请日：2000-07-26
申请人： Jason T. Sterne , Thomas E. Davis , Robert E. Robotham , Shay Nahum
发明人： Jason T. Sterne , Thomas E. Davis , Robert E. Robotham , Shay Nahum
IPC分类号： H04L12/56 , H04I12/50
CPC分类号： H04L49/30 , H04L49/20 , H04L49/201 , H04L49/25 , H04L49/3009 , H04L49/3081 , H04L49/604 , H04L49/606 , H04L2012/5652
摘要： A multi-protocol switch that supports both ATM and IP traffic and method for use is presented. The multi-protocol switch associates certain input connections, as identified by virtual path identifier/virtual connection identifier (VPI/VCI), with either IP or ATM traffic. When the connection identifier for a cell received indicates that the cell is an ATM cell, the multi-protocol switch forwards the cell through the switch, where the forwarding is based on the connection identifier for the cell. If the connection identifier for a cell indicates that the cell is IP traffic, the cell is stored with other cells included in the IP packet to which the cells correspond within the ingress line card of the switch. The destination address included in the packet is used to determine a forwarding decision for the cells included in the packet. After at least partial reassembly, the packet is segmented and forwarded through the switch based on the forwarding decision determined from the destination address.
摘要翻译：提出了支持ATM和IP流量的多协议交换机和使用方法。多协议交换机将由虚拟路径标识符/虚拟连接标识符（VPI / VCI）标识的某些输入连接与IP或ATM流量相关联。当接收到的小区的连接标识符指示该小区是ATM信元时，多协议交换机通过交换机转发该小区，其中转发基于该小区的连接标识符。如果小区的连接标识符表示该小区是IP业务，则该小区与包括在小区对应的IP分组中的其他小区一起存储在交换机的入口线路卡内。分组中包含的目的地址用于确定分组中包含的小区的转发决定。在至少部分重新组装之后，基于从目的地址确定的转发决定，分组并通过交换机转发分组。

4. 发明申请

US20050157647A1 Metering packet flows for limiting effects of denial of service attacks 有权
标题翻译：计费数据包流，限制拒绝服务攻击的影响
公开(公告)号：US20050157647A1
公开(公告)日：2005-07-21
申请号：US10760277
申请日：2004-01-21
申请人： Jason Sterne , Adrian Grah , Shay Nahum , Predrag Kostic , Herman Liu
发明人： Jason Sterne , Adrian Grah , Shay Nahum , Predrag Kostic , Herman Liu
IPC分类号： H04L1/00 , H04L29/06
CPC分类号： H04L63/0227 , H04L63/101 , H04L63/1458
摘要： The packet rate limiting method and system is used for detecting and blocking the effects of DoS attacks on IP networks. The method uses an ACL counter that stores an action parameter in the first 3 most significant bits and uses 13 bits as a packet counter. A rate limit is enforced by setting the packet counter to an initial value, and resetting this value at given intervals of time. The action parameter enables the ACL to accept or deny packets based on this rate limit. If the number of packets in the incoming flow saturates the packet counter before the reset time, the packets are denied access to the network until the counter is next reset. The denied packets may be just discarded or may be extracted for further examination.
摘要翻译：分组速率限制方法和系统用于检测和阻止DoS攻击对IP网络的影响。该方法使用ACL计数器，其存储动作参数在前3个最高有效位中，并使用13位作为数据包计数器。通过将分组计数器设置为初始值来实现速率限制，并在给定的时间间隔重置该值。该操作参数使ACL能够根据此速率限制接受或拒绝数据包。如果传入流中的数据包数量在复位时间之前使数据包计数器饱和，则数据包将被拒绝访问网络，直到下一次重置计数器为止。被拒绝的数据包可能被丢弃或可能被提取用于进一步检查。

5. 发明授权

US07236492B2 Configurable packet processor 有权
标题翻译：可配置数据包处理器
公开(公告)号：US07236492B2
公开(公告)日：2007-06-26
申请号：US09988939
申请日：2001-11-21
申请人： Tom Davis , Chad Kendall , Shay Nahum
发明人： Tom Davis , Chad Kendall , Shay Nahum
IPC分类号： H04L12/28
CPC分类号： H04L45/54 , H04L45/00 , H04L45/50 , H04L45/7453 , H04L69/12 , H04L69/16 , H04L69/161 , H04L69/22
摘要： A packet processing device has an on-board match engine memory. Actions to be taken on a packet can be looked up in the match engine memory using a key comprising a match engine index and a protocol field from the packet. The match engine index is obtained from either a relatively small on-board parser memory or a larger context memory. The parser memory contains match engine indices for sparse protocols. Performance approaching that of hard-wired packet processors can be obtained. New protocols or changes in protocols can be accommodated by writing new values into the match engine, parser and context memories. The packet processing device can be provided in a pipelined architecture.
摘要翻译：分组处理设备具有板上匹配引擎存储器。可以使用包括匹配引擎索引和来自分组的协议字段的密钥在匹配引擎存储器中查找要在分组上执行的动作。匹配引擎索引是从相对较小的板载解析器内存或更大的上下文存储器获得的。解析器内存包含稀疏协议的匹配引擎索引。可以获得接近硬连线分组处理器的性能。可以通过将新值写入匹配引擎，解析器和上下文存储器来适应新协议或协议的更改。分组处理设备可以以流水线架构提供。

6. 发明授权

US07436770B2 Metering packet flows for limiting effects of denial of service attacks 有权
标题翻译：计费数据包流，限制拒绝服务攻击的影响
公开(公告)号：US07436770B2
公开(公告)日：2008-10-14
申请号：US10760277
申请日：2004-01-21
申请人： Jason Sterne , Adrian Grah , Shay Nahum , Predrag Kostic , Herman Ho Ming Liu
发明人： Jason Sterne , Adrian Grah , Shay Nahum , Predrag Kostic , Herman Ho Ming Liu
IPC分类号： H04J3/14
CPC分类号： H04L63/0227 , H04L63/101 , H04L63/1458
摘要： The packet rate limiting method and system is used for detecting and blocking the effects of DoS attacks on IP networks. The method uses an ACL counter that stores an action parameter in the first 3 most significant bits and uses 13 bits as a packet counter. A rate limit is enforced by setting the packet counter to an initial value, and resetting this value at given intervals of time. The action parameter enables the ACL to accept or deny packets based on this rate limit. If the number of packets in the incoming flow saturates the packet counter before the reset time, the packets are denied access to the network until the counter is next reset. The denied packets may be just discarded or may be extracted for further examination.
摘要翻译：分组速率限制方法和系统用于检测和阻止DoS攻击对IP网络的影响。该方法使用ACL计数器，其存储动作参数在前3个最高有效位中，并使用13位作为数据包计数器。通过将分组计数器设置为初始值来实现速率限制，并在给定的时间间隔重置该值。该操作参数使ACL能够根据此速率限制接受或拒绝数据包。如果进入流中的数据包数量在复位时间之前使数据包计数器饱和，则数据包将被拒绝访问网络，直到下一次重置计数器为止。被拒绝的数据包可能被丢弃或可能被提取用于进一步检查。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式