Juniper Networks Patent Applications

CONGESTION MANAGEMENT OF SESSION NEGOTIATIONS IN NETWORK DEVICES

Granted: December 24, 2009
Application Number: 20090320122
A network device implements congestion management of sessions of a network protocol. In one implementation, an incoming request component receives session requests for a negotiation session between the network device and a second network device. A capacity pool stores a value relating to capacity of the network device to continue to efficiently process the session requests. New sessions are initiated when the value stored in the capacity pool is less than an estimate of the capacity of…

MANAGING AND CHANGING DEVICE SETTINGS

Granted: December 24, 2009
Application Number: 20090319765
A system facilitates the configuring of a set of devices. The system stores templates, where each template includes configuration data that applies to one or more of the devices. The system configures the devices based on the configuration data in the templates.

NETWORK POLICY EVALUATION

Granted: December 17, 2009
Application Number: 20090313373
A device may include an interface to send policy information to an evaluation module, where the policy information is related to a group of policies, and receive a group of results from the evaluation module, where the group of results indicates whether the status of a source device complies with the croup of policies. The interface may send an instruction to a destination device configured to implement at least a subset of the policies with respect to the source device based on the…

SYSTEMS AND METHODS FOR HARVESTING EXPIRED SESSIONS

Granted: December 10, 2009
Application Number: 20090307357
A system harvests sessions in a network device. The system receives a first data unit associated with a session and installs the session in a first queue until expiration of a first time period. The system installs the session in a second queue until the occurrence of at least one of an expiration of a second time period and a receipt of a data unit associated with the session. The system harvests the session upon expiration of the second time period.

HYBRID TYPE TELEPHONY SYSTEM

Granted: December 3, 2009
Application Number: 20090296695
A hybrid type telephony system capable of establishing a connection between conventional type telephone sets contained in an exchange unit and LAN type telephone sets contained in an IP network, the system comprising: a gateway circuit connected between the exchange unit and the IP network and performing voice data format conversion, and a central control unit connected to the LAN of the IP network for establishing a communication path to the exchange unit via a control bus, controlling…

SECURE TRANSPORT OF MULTICAST TRAFFIC

Granted: November 26, 2009
Application Number: 20090292917
Secure tunneled multicast transmission and reception through a network is provided. A join request may be received from a second tunnel endpoint, the join request indicating a multicast group to be joined. Group keys may be transmitted to the second tunnel endpoint, where the group keys are based at least on the multicast group. A packet received at the first tunnel endpoint may be cryptographically processed to generate an encapsulated payload. A header may be appended to the…

FEDERATING TRUST IN A HETEROGENEOUS NETWORK

Granted: November 26, 2009
Application Number: 20090293103
A check of a processing device is performed. A device may receive a network access request to access a network from a first processing device. A security check may be caused to be performed on the first processing device. Whether to grant the network access request to the first processing device is based on a result of the security check.

DELAY VARIATION BUFFER CONTROL TECHNIQUE

Granted: November 19, 2009
Application Number: 20090285230
A delay variation buffer controller allowing proper cell delay variation control reflecting an actual network operation status is disclosed. A detector detects an empty status of the data buffer when data is read out from the data buffer at intervals of a controllable time period. A counter counts the number of contiguous times the empty status was detected. A proper time period is calculated depending on a value of the counter at a time when the empty status is not detected and the…

PRIORITY SCHEDULING USING PER-PRIORITY MEMORY STRUCTURES

Granted: November 19, 2009
Application Number: 20090285231
A system schedules traffic flows on an output port using circular memory structures. The circular memory structures may include rate wheels that include a group of sequentially arranged slots. The traffic flows may be assigned to different rate wheels on a per-priority basis.

CONTROLLING ACCESS NODES WITH NETWORK TRANSPORT DEVICES WITHIN WIRELESS MOBILE NETWORKS

Granted: November 12, 2009
Application Number: 20090279701
A network controls provision of access functionality by an access node to provide a network service to a subscriber device. For example, the network device may control the queuing and forwarding of packets by the access node to facilitate packet transmission according to, for example, a Quality of Service class. The network device may send control messages to the access node to dynamically configure a control object stored by the access node, such as a Quality of Service profile. The…

TRANSPARENT OPTIMIZATION FOR TRANSMISSION CONTROL PROTOCOL FLOW CONTROL

Granted: November 5, 2009
Application Number: 20090274046
A system and method that optimizes transmission control protocol (TCP) flow control without intruding upon TCP's core algorithms. A control module relatively near a sender's local area network (LAN) automatically identifies a packet flow that has become window-limited. After the packet flow has been identified as window-limited, the control module relatively near the sender's LAN and another control module relatively near a receiver's LAN optimize the packet flow by increasing the window…

MEMORY ORGANIZATION IN A SWITCHING DEVICE

Granted: October 29, 2009
Application Number: 20090268740
A network device switches variable length data units from a source to a destination in a network. An input port receives the variable length data unit and a divider divides the variable length data unit into uniform length data units for temporary storage in the network device. A distributed memory includes a plurality of physically separated memory banks addressable using a single virtual address space and an input switch streams the uniform length data units across the memory banks…

ENHANCED CMTS FOR RELIABILITY, AVAILABILITY, AND SERVICEABILITY

Granted: October 29, 2009
Application Number: 20090268749
A Cable Modem Termination System (CMTS) is partitioned into Line Cards, I/O Cards, and a midplane to provide enhanced Reliability, Availability, and Serviceability. Each I/O Card provides a cabling interface for coupling an assigned Line Card to other portions of a Hybrid-Fiber-Coax Network. A plurality of RF signals is coupled via connectors between each Line Card and a corresponding I/O Card, via the midplane. This permits a Line Card to be removed for servicing without requiring…

MULTIPLE INPUT, MULTIPLE OUTPUT CHANNEL, DIGITAL RECEIVER TUNER

Granted: October 29, 2009
Application Number: 20090268853
The present invention teaches a compact and highly integrated multiple-channel digital tuner and receiver architecture, suitable for widespread field deployment, wherein each receiver demodulator channel may be remotely, automatically, dynamically, and economically configured for a particular cable, carrier frequency, and signaling baud-rate, from an option universe that includes a plurality of input cables, a plurality of carrier frequencies, and a plurality of available baud-rates. A…

CONNECTOR RETAINING BRACKET

Granted: October 22, 2009
Application Number: 20090264007
A retainer may include a hollow portion for holding a connector, a path for conveying the connector from outside the retainer to the hollow portion, a surface that is adjacent to the connector when the connector is held in the hollow portion, a fastener for applying a force to couple the retainer to a device, and a member that causes the surface to press the connector against a connector receiver associated with the device and to prevent the connector from being disengaged from the…

DATAGRAM RELAYING APPARATUS WITH LOAD DISTRIBUTING FUNCTION

Granted: October 15, 2009
Application Number: 20090257349
A datagram relaying apparatus includes a plurality of protocol terminating units, and a destination determining processor. The destination determining processor includes a path selecting section which determines a transfer destination route for a stream of packets received from any of the protocol terminating units. The path selecting section determines whether or not transfer of the received stream of packets to the transfer destination route is in an inhibition state, and selects…

SYSTEM, APPARATUS, AND METHOD FOR INCREASING RESILIENCY IN COMMUNICATIONS

Granted: October 15, 2009
Application Number: 20090257459
A transmitting system inserts runt abort packets in an outgoing data stream during idle time inter-frame time fill. The runt abort packets cause the receiving system to synchronize itself to the transmitting system so that even if an error during inter-frame time fill causes the receiving system to go into an erroneous state, the receiving system will be synchronized with the transmitting system before receiving valid data. In one embodiment, the transmitting system transmits data in…

SYSTEMS AND METHODS FOR IMPROVING PACKET SCHEDULING ACCURACY

Granted: October 1, 2009
Application Number: 20090245246
A packet scheduler is configured to perform quality of service (QoS) scheduling on a per-data unit basis. A downstream processing engine is operatively connected to the packet scheduler for receiving forwarded packets. A feedback path is operatively connected between the downstream processing engine and the packet scheduler for transmitting a net data unit change value reflecting a change in packet size between an output of the packet scheduler and an output of the downstream processing…

WIRELESS FIREWALL WITH TEAR DOWN MESSAGING

Granted: September 17, 2009
Application Number: 20090235348
Methods of screening incoming packets are provided. A first firewall detects a tunnel formation. A second firewall maintains a list of open firewall sessions. Each tunnel has one or more associated firewall sessions. The first firewall detects variable situations, such as when the tunnel is torn down, and notifies the second firewall so that, for example, the second firewall call act to clear an associated firewall session from the firewall session list. Incoming packets that are…

SERVICE-SPECIFIC LOGICAL INTERFACES FOR PROVIDING VPN CUSTOMERS ACCESS TO EXTERNAL MULTICAST CONTENT

Granted: September 3, 2009
Application Number: 20090219934
A network device seamlessly handles multicast traffic flow between virtual private networks (VPNs) and content providers located external to the VPNs. For example, the network device, such as a router, comprises an interface card and a forwarding component. The forwarding component maintains forwarding data for a public network and forwarding data for the virtual private network. The interface card receives a multicast packet from a virtual private network destined for a multicast…