Support IP pool-based configuration

• US 6,539,431 B1
• Filed: 08/10/1999
• Issued: 03/25/2003
• Est. Priority Date: 11/12/1998
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Sitaraman, Aravind, Yager, Charles Troper
• Primary Examiner(s): Maung, Zarni
• Application Number:
  US09/371,402
• Time in Patent Office: 1,323 Days
• Field of Search: 709/226, 709/223, 709/224, 709/235, 709/217, 709/245, 709/220, 709/229
• US Class Current: 709/226
• CPC Class Codes: G06F 15/173 using an interconnection network, e.g. matrix, shuffle, pyramid, star, snowflake
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 47/15 in relation to multipoint traffic arrangements for broadcast or multicast in data networks H04L12/18
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/808 User-type aware
• CPC Class Codes: H04L 61/5061 Pools of addresses

Abstract

An address is allocated to a host device which is selected to obtain network access from any access point within a given communications system, while maintaining a settings configuration scheme that is consistently applied to the communications network for the user regardless of the access point used by the user. This is accomplished by assigning a user profile to a subscriber, said user profile including a pool identifier, said pool identifier indicating the settings configuration scheme for the subscriber; using said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure; forwarding said authentication protocol packet to a Network Authentication Server; comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and configuring settings on the communications network in accordance with the settings configuration scheme.

Claims

1. A method for maintaining a settings configuration scheme for a subscriber seeking access to a communications network, said method comprising:

receiving a forwarded authentication protocol packet on a Network Authentication Server, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the settings configuration scheme for the subscriber;

comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and

configuring settings on the communications network in accordance with the settings configuration scheme.

2. The method of claim 1, wherein said authentication protocol packet is a RADIUS+ packet.

3. The method of claim 1, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

4. The method of claim 1, wherein said appended attributes are appended by a protocol gateway.

5. The method of claim 4, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

6. The method of claim 1, wherein said second data structure is a record containing a list of attributes and their corresponding settings configuration schemes.

7. The method of claim 1, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

8. The method of claim 1, further including:

providing a second access point to the communications network; and

using said pool identifier if the same subscriber attempts to log-on to said second access point.

9. The method of claim 1, further including:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

10. The method of claim 1, wherein said configuring is performed by said Network Authentication Server.

11. The method of claim 10, wherein said configuring includes transmitting configuration data into the network to configure the communications network.

14. The method of claim 10, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

12. A method for maintaining a Quality of Service level for a subscriber seeking access to a communications network, said method comprising:

receiving a forwarded authentication protocol packet on a Network Authentication Server, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the Quality of Service level for the subscriber;

comparing said one or more attributes to a second data structure, said second data structure indicating the Quality of Service level associated with said one or more attributes; and

configuring settings on the communications network in accordance with the Quality of Service level.

13. The method of claim 12, wherein said authentication protocol packet is a RADIUS+ packet.

15. The method of claim 12, wherein said appended attributes are appended by a protocol gateway.

16. The method of claim 15, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

17. The method of claim 12, wherein said second data structure is a record containing a list of attributes and their corresponding Quality of Service levels.

18. The method of claim 12, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

19. The method of claim 12, further including:

providing a second access point to the communications network; and

using said pool identifier if the same subscriber attempts to log-on to said second access point.

20. The method of claim 12, further including:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

21. The method of claim 12, wherein said configuring is performed by said Network Authentication Server.

22. The method of claim 21, wherein said configuring includes transmitting configuration data into the network to configure the communications network.

23. A method for maintaining Quality of Service levels for subscribers belonging to a communications network regardless of the log-on location of the subscribers, the communications network having a first access point having a local memory, and a second access point, the method comprising:

assigning a user profile to a subscriber in said local memory, said user profile including a pool identifier, said pool identifier indicating the Quality of Service level for the subscriber, if said subscriber attempts to log-on to said first access point;

obtaining said subscriber'"'"'s pool identifier from a global memory available to said second access point, said global memory having access to said local memory, if said subscriber attempts to log-on to said second access point;

using said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure;

forwarding said authentication protocol packet to a Network Authentication Server;

comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and

configuring settings on the communications network in accordance with the settings configuration scheme.

24. The method of claim 23, wherein said authentication protocol packet is a RADIUS+ packet.

25. The method of claim 23, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

26. The method of claim 23, wherein said using is performed by a protocol gateway.

27. The method of claim 26, wherein said using is performed by a FilterOutBound state of a protocol gateway.

28. The method of claim 23, wherein said second data structure is a record containing a list of attributes and their corresponding Quality of Service levels.

29. The method of claim 23, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

30. The method of claim 23, further including:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

31. The method of claim 23, wherein said configuring is performed by said Network Authentication Server.

32. The method of claim 31, wherein said configuring includes transmitting configuration data into the network to configure the communications network.

33. A communications system for maintaining a settings configuration scheme for a subscriber comprising:

an access point;

a protocol gateway coupled to said access point, said protocol gateway including a user profile assigner, an authentication protocol packet appender, and an authentication protocol packet forwarder; and

a network authentication server coupled to said protocol gateway, said network authentication server including an attribute comparer and a settings configuror.

34. The communications system of claim 33, wherein said authentication protocol packet appender uses the RADIUS+ protocol.

35. The communications system of claim 33, further including a first record coupled to said protocol gateway, said first record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

36. The communications system of claim 33, wherein said Protocol Gateway includes a FilterOutBound state of a protocol gateway.

37. The communications system of claim 33, further including a second record coupled to said network authentication server, said second record containing a list of attributes and their corresponding settings configuration schemes.

38. A communications system for maintaining a Quality of Service level for a subscriber seeking access to the communications system, comprising:

an access point;

a protocol gateway coupled to said access point, said protocol gateway including a user profile assigner, an authentication protocol packet appender, and an authentication protocol packet forwarder; and

a network authentication server coupled to said protocol gateway, said network authentication server including an attribute comparer and a Quality of Service configuror.

39. The communications system of claim 38, wherein said authentication protocol packet appender uses the RADIUS+ protocol.

40. The communications system of claim 38, further including a first record coupled to said protocol gateway, said first record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

41. The communications system of claim 38, wherein said Protocol Gateway includes a FilterOutBound state of a protocol gateway.

42. The communications system of claim 38, further including a second record coupled to said network authentication server, said second record containing a list of attributes and their corresponding settings configuration schemes.

43. A communications system for maintaining a settings configuration scheme for a subscriber seeking access to a communications network, said method comprising:

means for receiving a forwarded authentication protocol packet on a Network Authentication Server, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the settings configuration scheme for the subscriber;

means for comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and

means for configuring settings on the communications network in accordance with the settings configuration scheme.

44. The communications system of claim 43, wherein said authentication protocol packet is a RADIUS+ packet.

45. The communications system of claim 43, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

46. The communications system of claim 43, wherein said appended attributes are appended by a protocol gateway.

47. The communications system of claim 46, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

48. The communications system of claim 43, wherein said second data structure is a record containing a list of attributes and their corresponding settings configuration schemes.

49. The communications system of claim 43, wherein said means for configuring includes means for alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

50. The communications system of claim 43, further including:

means for providing a second access point to the, communications network; and

means for using said pool identifier if the same subscriber attempts to log-on to said second access point.

51. The communications system of claim 43, further including:

means for storing addresses in an address pool;

means for categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

means for allocating to said subscriber s user profiles which include pool identifiers that correspond to said service types.

52. A communications system for maintaining a Quality of Service level for a subscriber seeking access to a communications network, said system comprising:

means for receiving a forwarded authentication protocol packet on a Network Authentication Server, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the Quality of Service level for the subscriber;

means for comparing said one or more attributes to a second data structure, said second data structure indicating the Quality of Service level associated with said one or more attributes; and

means for configuring settings on the communications network in accordance with the Quality of Service level.

53. The communications system of claim 52, wherein said authentication protocol packet is a RADIUS+ packet.

54. The communications system of claim 52, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

55. The communications system of claim 52, wherein said appended attributes are appended by a protocol gateway.

56. The communications system of claim 55, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

57. The communications system of claim 52, wherein said second data structure is a record containing a list of attributes and their corresponding Quality of Service levels.

58. The communications system of claim 52, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

59. The communications system of claim 52, further including:

providing a second access point to the communications network; and

using said pool identifier if the same sub scriber attempts to log-on to said second access point.

60. The communications system of claim 52, further including:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

61. A communications system for maintaining Quality of Service levels for subscribers belonging to a communications network regardless of the log-on location of the subscribers, the communications network having a first access point having a local memory, and a second access point, the method comprising:

means for assigning a user profile to a subscriber in said local memory, said user profile including a pool identifier, said pool identifier indicating the Quality of Service level for the subscriber, if said subscriber attempts to log-on to said first access point;

means for obtaining said subscriber'"'"'s pool identifier from a global memory available to said second access point, said global memory having access to said local memory, if said subscriber attempts to log-on to said second access point;

means for using said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure;

means for forwarding said authentication protocol packet to a Network Authentication Server;

means for comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and

means for configuring settings on the communications network in accordance with the settings configuration scheme.

62. The communications system of claim 61, wherein said authentication protocol packet is a RADIUS+ packet.

63. The communications system of claim 61, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

64. The communications system of claim 61, wherein said using is performed by a protocol gateway.

65. The communications system of claim 64, wherein said using is performed by a FilterOutBound state of a protocol gateway.

66. The communications system of claim 61, wherein said second data structure is a record containing a list of attributes and their corresponding Quality of Service levels.

67. The communications system of claim 61, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

68. The communications system of claim 61, further including:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.