TECHNIQUES FOR PREFIX SUBNETTING

• US 20120314617A1
• Filed: 06/09/2011
• Published: 12/13/2012
• Est. Priority Date: 06/09/2011
• Status: Active Grant

• Current Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Original Assignee: Time Warner Cable Inc. (Charter Communications Incorporated)
• Inventors: Howard, Lee, Erichsen, Kirk, Gould, Ken
• Granted Patent: US 8,995,360 B2
• Time in Patent Office: Days
• US Class Current: 370/254
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2834 Switching of information between an external network and a home network access arrangements H04L12/2856
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 2101/668 Internet protocol [IP] address subnets
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Abstract

A delegated internet protocol version six prefix, which is assigned to a gateway device which is interposed between an internet and a premises, is divided into a lower-numbered portion and a higher-numbered portion. One of the portions is allocated to a plurality of networks associated with the premises. The other is broken into a plurality of blocks for use in prefix delegation for allocation to routers associated with the premises requesting the prefix delegation. The gateway device is operated in accordance with the dividing, allocating, and breaking steps. Optionally, at least some of the plurality of networks associated with the premises are pre-categorized into at least first and second trust zones, and the operating step further includes operating the gateway device in accordance with the pre-categorizing step. Apparatuses, devices, computer program products, and internet protocol version four embodiments are also provided.

Claims

1. A method comprising the steps of:

dividing a delegated internet protocol version six prefix, which is assigned to a gateway device which is interposed between an internet and a premises, into a lower-numbered portion and a higher-numbered portion;

allocating one of said lower-numbered portion and said higher-numbered portion to a plurality of networks associated with said premises;

breaking another one of said lower-numbered portion and said higher-numbered portion into a plurality of blocks for use in prefix delegation for allocation to routers associated with said premises requesting said prefix delegation; and

operating said gateway device in accordance with said dividing, allocating, and breaking steps.

2. The method of claim 1, further comprising pre-categorizing at least some of said plurality of networks associated with said premises into at least first and second trust zones, wherein said operating step further comprises operating said gateway device in accordance with said pre-categorizing step.

3. The method of claim 2, further comprising assigning, to said gateway device, said delegated internet protocol version six prefix.

4. The method of claim 2, wherein said internet comprises the Internet.

5. The method of claim 4, wherein said lower-numbered portion comprises a lower-numbered half and said higher-numbered portion comprises a higher-numbered half.

6. The method of claim 5, wherein:

said lower-numbered half is allocated to said plurality of networks associated with said premises; and

said higher-numbered half is broken into said plurality of blocks for use in said prefix delegation.

7. The method of claim 6, wherein:

said delegated internet protocol version six prefix comprises a /56 delegated prefix;

said plurality of networks associated with said premises comprise one hundred twenty eight /64 networks;

said allocating of said lower-numbered half to said plurality of networks associated with said premises further comprises;

breaking said lower-numbered half in half to obtain a lower-numbered /58 network quarter and a higher-numbered /58 network quarter;

assigning said lower-numbered /58 network quarter to sixty four wired ones of said one hundred twenty eight /64 networks; and

assigning said higher-numbered /58 network quarter to sixty four wireless ones of said one hundred twenty eight /64 networks; and

said plurality of blocks for use in said prefix delegation comprise /60 blocks.

8. The method of claim 7, wherein said breaking of said higher-numbered half into said plurality of blocks further comprises:

breaking said higher-numbered half in half to obtain a lower-numbered /58 prefix delegation quarter and a higher-numbered /58 prefix delegation quarter;

assigning said lower-numbered /58 prefix delegation quarter to prefix delegation associated with wired local area networks; and

assigning said higher-numbered /58 prefix delegation quarter to prefix delegation associated with wireless local area networks.

9. The method of claim 7, wherein said higher-numbered half comprises a /57 half that is not broken down further.

10. The method of claim 6, wherein said lower- and higher-numbered halves each comprise a /57 half that is not broken down further.

11. The method of claim 2, wherein:

said gateway device comprises a four-port Ethernet switch, a multimedia over coaxial cable interface, and a wireless interface having five service set identifiers;

said first trust zone comprises a trusted zone;

said second trust zone comprises an un-trusted zone;

said pre-categorizing comprises;

assigning said four-port Ethernet switch, said multimedia over coaxial cable interface, and a lowest numbered three of said five service set identifiers to said first trust zone; and

assigning a highest numbered two of said five service set identifiers to said second trust zone; and

said operating in accordance with said pre-categorizing step comprises allowing packets to travel from said trusted zone to said un-trusted zone but not from said un-trusted zone to said trusted zone.

12. The method of claim 2, wherein:

said pre-categorizing further comprises pre-categorizing into at least a third trust zone;

said gateway device comprises a four-port Ethernet switch, a multimedia over coaxial cable interface, and a wireless interface having five service set identifiers;

said first trust zone comprises a trusted zone;

said second and third trust zones comprise un-trusted zones;

said pre-categorizing comprises;

assigning a lowest three numbered ports of said four-port Ethernet switch, said multimedia over coaxial cable interface, and a lowest numbered three of said five service set identifiers to said first trust zone;

assigning a highest numbered two of said five service set identifiers to said second trust zone; and

assigning a highest numbered one of said ports of said four-port Ethernet switch to said third trust zone; and

said operating in accordance with said pre-categorizing step comprises allowing packets to travel from said trusted zone to either of said un-trusted zones but not from either of said un-trusted zones to said trusted zone.

13. The method of claim 2, wherein:

said pre-categorizing further comprises pre-categorizing into at least a third trust zone;

said gateway device comprises a four-port Ethernet switch, a multimedia over coaxial cable interface, and a wireless interface having five service set identifiers;

said first and third trust zones comprise trusted zones;

said second trust zone comprise an un-trusted zone;

said pre-categorizing further comprises;

assigning a lowest three numbered ports of said four-port Ethernet switch, said multimedia over coaxial cable interface, and a lowest numbered three of said five service set identifiers to said first trust zone;

assigning a highest numbered two of said five service set identifiers to said second trust zone; and

assigning a highest numbered one of said ports of said four-port Ethernet switch to said third trust zone; and

said operating in accordance with said pre-categorizing step comprises;

allowing packets to travel from either of said trusted zones to said un-trusted zone;

allowing packets to travel between said trusted zones; and

not allowing packets to travel from said un-trusted zone to either of said trusted zones.

14. The method of claim 2, wherein:

said pre-categorizing further comprises pre-categorizing into at least a third trust zone and a fourth trust zone;

said gateway device comprises a four-port Ethernet switch, a multimedia over coaxial cable interface, and a wireless interface having five service set identifiers;

said first and third trust zones comprise trusted zones;

said second and fourth trust zones comprise un-trusted zones;

said pre-categorizing further comprises;

assigning a lowest two numbered ports of said four-port Ethernet switch, said multimedia over coaxial cable interface, and a lowest numbered three of said five service set identifiers to said first trust zone;

assigning a highest numbered two of said five service set identifiers to said second trust zone;

assigning a next highest numbered one of said ports of said four-port Ethernet switch to said third trust zone; and

assigning a most highly numbered one of said ports of said four-port Ethernet switch to said fourth trust zone; and

said operating in accordance with said pre-categorizing step comprises;

allowing packets to travel from either of said trusted zones to either of said un-trusted zones;

allowing packets to travel between said trusted zones; and

not allowing packets to travel from either of said un-trusted zones to either of said trusted zones.

15. The method of claim 2, wherein said operating of said gateway device in accordance with said pre-categorizing step further comprises applying said at least first and second trust zones as policy inputs to a firewall associated with said gateway device.

16. The method of claim 1, further comprising remotely diagnosing at least one problem associated with at least one of said plurality of networks associated with said premises, based on said allocating step.

19. The article of manufacture of claim 1, further comprising computer readable program code configured to pre-categorize at least some of said plurality of networks associated with said premises into at least first and second trust zones, wherein said computer readable program code configured to operate further comprises computer readable program code configured to operate said gateway device in accordance with said pre-categorizing.

17. A method comprising the steps of:

obtaining an internet protocol version four public address associated with a gateway device which is interposed between an internet and a premises;

in accordance with predetermined rules, dividing a private address space for said premises into at least;

a first subdivision for at least one of a wired sub-network, a wireless sub-network, and a multimedia over coaxial cable interface; and

a second subdivision for at least another one of said wired sub-network, said wireless sub-network, and said multimedia over coaxial cable interface;

assigning a first trust value to at least a portion of said first subdivision and a second trust value to at least a portion of said second subdivision in accordance with said predetermined rules; and

operating said gateway device in accordance with said obtaining, dividing, and assigning steps.

18. An article of manufacture comprising a computer program product, said computer program product comprising:

a tangible computer-readable recordable storage medium, storing in a non-transitory manner computer readable program code, the computer readable program code comprising;

computer readable program code configured to divide a delegated internet protocol version six prefix, which is assigned to a gateway device which is interposed between an internet and a premises, into a lower-numbered portion and a higher-numbered portion;

computer readable program code configured to allocate one of said lower-numbered portion and said higher-numbered portion to a plurality of networks associated with said premises;

computer readable program code configured to break another one of said lower-numbered portion and said higher-numbered portion into a plurality of blocks for use in prefix delegation for allocation to routers associated with said premises requesting said prefix delegation; and

computer readable program code configured to operate said gateway device in accordance with said dividing, allocating, and breaking.

20. An apparatus comprising:

means for dividing a delegated internet protocol version six prefix, which is assigned to a gateway device which is interposed between an internet and a premises, into a lower-numbered portion and a higher-numbered portion;

means for allocating one of said lower-numbered portion and said higher-numbered portion to a plurality of networks associated with said premises;

means for breaking another one of said lower-numbered portion and said higher-numbered portion into a plurality of blocks for use in prefix delegation for allocation to routers associated with said premises requesting said prefix delegation; and

means for operating said gateway device in accordance with said dividing, allocating, and breaking.

21. The apparatus of claim 20, further comprising means for pre-categorizing at least some of said plurality of networks associated with said premises into at least first and second trust zones, wherein said means for operating further comprise means for operating said gateway device in accordance with said pre-categorizing.

22. A gateway device for interposition between an internet and a premises, said gateway apparatus comprising:

a memory; and

at least one processor, coupled to said memory, and operative to;

divide a delegated internet protocol version six prefix, which is assigned to said gateway device, into a lower-numbered portion and a higher-numbered portion;

allocate one of said lower-numbered portion and said higher-numbered portion to a plurality of networks associated with said premises;

break another one of said lower-numbered portion and said higher-numbered portion into a plurality of blocks for use in prefix delegation for allocation to routers associated with said premises requesting said prefix delegation; and

operate said gateway device in accordance with said dividing, allocating, and breaking.

23. The gateway device of claim 22, wherein said at least one processor is further operative to pre-categorize at least some of said plurality of networks associated with said premises into at least first and second trust zones, and wherein said at least one processor is operative to operate said gateway device in accordance with said pre-categorizing.

24. The gateway device of claim 23, wherein said lower-numbered portion comprises a lower-numbered half and said higher-numbered portion comprises a higher-numbered half.

25. The gateway device of claim 24, wherein:

said lower-numbered half is allocated to said plurality of networks associated with said premises; and

said higher-numbered half is broken into said plurality of blocks for use in said prefix delegation.

26. The gateway device of claim 23, further comprising:

a wired network switch, coupled to said memory and said at least one processor;

a multimedia over coaxial cable interface, coupled to said memory and said at least one processor; and

a wireless interface having a plurality of set identifiers, coupled to said memory and said at least one processor;

wherein;

said first trust zone comprises a trusted zone;

said second trust zone comprises an un-trusted zone;

said pre-categorizing comprises;

assigning said wired network switch, said multimedia over coaxial cable interface, and a first portion of said service set identifiers to said first trust zone; and

assigning a second portion of said service set identifiers to said second trust zone; and

said operating in accordance with said pre-categorizing comprises allowing packets to travel from said trusted zone to said un-trusted zone but not from said un-trusted zone to said trusted zone.