Juniper Networks Patent Applications

ROUTING DEVICE HAVING INTEGRATED MPLS-AWARE FIREWALL

Granted: February 18, 2010
Application Number: 20100043068
An MPLS-aware firewall allows firewall security policies to be applied to MPLS traffic. The firewall, which may be integrated within a routing device, can be configured into multiple virtual security systems. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to the packets. The user interface allows the user to define different zones and policies for different ones…

ENHANCED FIBER NODES WITH CMTS CAPABILITY

Granted: February 4, 2010
Application Number: 20100031305
Enhanced Cable Modem Termination System (CMTS) functionality, including programmable digital domain modulators and demodulators for dynamic channel assignment, is incorporated into Fiber Nodes (FNs) or mini Fiber Nodes (mFNs), yielding enhanced Fiber Nodes (eFNs). These eFns distribute CMTS functionality deep into Hybrid-Fiber-Coax Networks (HFCN) rather than centralizing the CMTS functions within a single location. Moving the cable modem terminations closer to the subscribers shortens…

LAYER TWO MAC FLUSHING/RE-ROUTING

Granted: February 4, 2010
Application Number: 20100027543
A method may include receiving a packet including a destination address, identifying a destination address entry based on the destination address, the destination address entry including an address identifier, comparing the address identifier to an event identifier, determining whether an event occurred based on the comparison, and forwarding the packet on an alternate path if it is determined that the event occurred.

CALL ADMISSION CONTROL METHOD AND SYSTEM

Granted: January 28, 2010
Application Number: 20100020805
A call admission control technique allowing flexible and reliable call admissions at an ATM switch in the case of an ATM network including both QoS-specified and QoS-unspecified virtual connections is disclosed. In the case where a QoS (Quality of Service) specified connection request occurs, an estimated bandwidth is calculated which is to be assigned to an existing QoS-unspecified traffic on the link associated with the QoS-specified connection request. A call control processor of the…

STS FRAME-ATM CELL CIRCUIT EMULATION APPARATUS AND FRAME LENGTH COMPENSATION METHOD FOR THE SAME

Granted: January 28, 2010
Application Number: 20100020804
A circuit simulation apparatus is disclosed by which, even if an STS-N frame of an abnormal length is detected by a reassembly buffer, the frame length can be compensated for while preventing an overflow of the reassembly buffer. When an STS-(N×M) frame formed by multiplexing M STS-N frames formed from different channels is cellularized into ATM cells or M different STS-N frames assembled from ATM cells are multiplexed into an STS-(N×M) frame, an ATM cell sync signal and ATM cell data…

LAYER 1 FRAME CONSTRUCTION

Granted: January 28, 2010
Application Number: 20100020803
A layer 1 network frame is disclosed that includes data of a layer 2 frame. A header of the layer 1 frame header includes: a packet length field to indicate a size of a payload portion of the layer 1 frame, a priority field to indicate a priority of the layer 1 frame, a protocol field to identify a protocol of the data in the layer 2 frame, a frame mode field to indicate a correspondence between the layer 1 frame and the layer 2 frame included within the payload, a stuff field to…

DEVICE FOR PERFORMING IP FORWARDING AND ATM SWITCHING

Granted: January 28, 2010
Application Number: 20100020802
A communication node contains intelligence for directing both internet protocol (IP) packets and Asychronous Transfer Mode (ATM) cells toward their destinations. The ATM cells and IP packets may be received within a common data stream. The respective devices process the ATM cells and IP packets to direct the cells and packets to the proper output ports towards their destinations. The device is capable of performing policing and quality of service (QOS) processing on both the ATM cells…

COMMUNICATION NETWORK DESIGN

Granted: January 28, 2010
Application Number: 20100020692
A communication network design circuit can derive a path and a necessary link capacity for multiple point communication service permitting arbitrary communication within a predetermined range of communication amount by providing traffic amount of data in-flowing through an ingress node and traffic amount of data flowing out through an egress node. The communication network designing circuit has setting means for setting a mathematical programming problem for deriving the multiple point…

ADAPTIVE CLOCK METHOD AND SYSTEM

Granted: January 21, 2010
Application Number: 20100014524
A device and method are disclosed for correctly restoring a read clock when there are a plurality of STM data stream transmission sources. In a CES device of an ATM communication system, ATM cells from respective connections, which are to be delivered to the same outgoing line, are accumulated in a reassembly buffer memory and a PLO control unit aggregates the amount of ATM cells accumulated in the reassembly buffer memory for each connection. Subsequently, the PLO control unit…

SYSTEMS AND METHODS FOR ROUTING DATA IN A COMMUNICATIONS NETWORK

Granted: January 21, 2010
Application Number: 20100014416
A network device includes a group of interfaces. Each interface is associated with at least one other interface of the group of interfaces and a group of network addresses. Each interface is configured to monitor at least one of the group of network addresses with which the each interface is associated or the at least one other interface with which the each interface is associated, and determine whether to logically shut down based on the monitoring.

AIRFLOW/COOLING SOLUTION FOR CHASSIS WITH ORTHOGONAL BOARDS

Granted: January 21, 2010
Application Number: 20100014248
A front-to-back cooling system allows cooling of an apparatus containing two orthogonal sets of modules. A vertical set of modules is cooled with vertical air flow across the modules that enters from a front of the apparatus and exits from the back of the apparatus. A horizontal set of modules is cooled with air flow that passes through openings in a midplane connecting the two sets of modules.

SUBSTITUTION CALL CONTROL SYSTEM IN A COMMUNICATION NETWORK

Granted: January 7, 2010
Application Number: 20100002708
A substitution call control system includes an ATM (Asynchronous Transfer Mode) subscriber network of an ATM communication network. The ATM subscriber network includes a plurality of network terminators respectively connected with a plurality of subscriber terminals, and an ATM subscriber line concentrator, which accommodates VCs (Virtual Connection) to the plurality of network terminators, and is connected with a ATM switching apparatus of the ATM network through a UNI (User-Network…

FRONT-TO-BACK COOLING SYSTEM FOR MODULAR SYSTEMS WITH ORTHOGONAL MIDPLANE CONFIGURATION

Granted: January 7, 2010
Application Number: 20100002382
A front-to-back cooling system allows cooling of an apparatus containing two orthogonal sets of modules. Each set of modules is independently cooled. A vertical set of modules is cooled with vertical air flow across the modules that enters from a front of the apparatus and exhausts from a back of the apparatus. A horizontal set of modules is cooled with horizontal front-to-back air flow. When the horizontal set of modules is at the front of the apparatus, a plenum extending exterior to…

DYNAMIC POLICY PROVISIONING WITHIN NETWORK SECURITY DEVICES

Granted: December 31, 2009
Application Number: 20090328219
The invention is directed to techniques for dynamic policy provisioning. A network security device may comprise a memory that stores a first policy that identifies a first set of patterns that correspond to a first set of network attacks and a second policy, and a control unit that applies the first policy to the network traffic to detect the first set of network attacks. The control unit, while applying the first policy, monitors parameters corresponding to one or more resources and…

RULE-BASED NETWORKING DEVICE

Granted: December 31, 2009
Application Number: 20090327827
A networking system, device, and method are provided. The networking device typically includes a user-defined ruleset including HTTP request rules and HTTP response rules. The networking device may further include a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server. The networking device may further include a…

TWO-DIMENSIONAL PIPELINED SCHEDULING TECHNIQUE

Granted: December 31, 2009
Application Number: 20090323695
A scheduler allowing high-speed scheduling scalable with the number of input and output ports of a crosspoint switch and suppressed unfairness among inputs is disclosed. The scheduler includes an M×M matrix of scheduling modules, each of which schedules packet forwarding connections from a corresponding input group of input ports to selected ones of a corresponding output group of output ports based on reservation information. A diagonal modulo pattern is used to determine a set of M…

FAST RE-ROUTE IN IP/MPLS NETWORKS AND OTHER NETWORKS USING SONET SIGNALING

Granted: December 31, 2009
Application Number: 20090323538
A provider device determines that a failure has occurred in a link or path and notifies a customer device of the failure. The notifying causes the customer device to become aware of the failure in less than one second.

SOFTWARE MERGING UTILITY

Granted: December 24, 2009
Application Number: 20090319552
A method and system merging a file across multiple versions of the file is provided. A file check-in request is identified. A merge candidate associated with the file is automatically identified. A view associated with the identified merge candidate is automatically identified. The file is merged with the merge candidate in the view, resulting in a merge result.

APPARATUS AND METHOD FOR DATA TRANSMISSION

Granted: December 24, 2009
Application Number: 20090316726
Local concentration of accessing loads on a data buffer during data cell reading is reduced. Also, by providing sufficient time for a data cell reading operation with respect to data cell transmission timing, transmission rate fluctuation of CBR data cells in a transmitting side is reduced. When transmission of a new data stream is added, controller in a cell control unit refers to a transmitted data cell count of VC information processed through a slot immediately before. The controller…

SCHEDULING SYSTEM AND SCHEDULING METHOD FOR THE SAME

Granted: December 24, 2009
Application Number: 20090316716
A schedule management table is additionally provided in a scheduling system comprising: a time slot for specifying, in slots, the cell transfer sequence of individual lines in one turn; a cell read sequence management table having elements to which the lines are set as cell transfer objects; schedule computation means for controlling the setting of the lines to the cell read sequence management table; and allocation processing means for converting the elements of the cell read sequence…