System and method for monitoring information in a network environment

• US 7,103,659 B2
• Filed: 04/09/2002
• Issued: 09/05/2006
• Est. Priority Date: 04/09/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Mackie, Robert A., O'Rourke, Chris, Schomburg, Keith R., Bakita, Thomas R., Pittenger, Frank W., Frye, Dwight R. Jr., Dixon, Walter G., White, John G.
• Primary Examiner(s): Najjar, Salem
• Assistant Examiner(s): Hamza, Faruk
• Application Number:
  US10/119,881
• Publication Number:
  US 20030233444A1
• Time in Patent Office: 1,610 Days
• Field of Search: 709223-226, 709/229
• US Class Current: 709/224
• CPC Class Codes: H04L 43/026 using flow identification

Abstract

A method for monitoring information in a network environment is provided that includes receiving one or more packets from a communication flow initiated by an end user. The information associated with the communication flow is then selectively communicated to a plurality of client-aware network elements.

Claims

1. An apparatus for monitoring information in a network environment, comprising:

an access element operable to receive one or more packets from a communication flow and to selectively communicate information associated with the communication flow to a plurality of client-aware network elements, wherein the information is authorization, authentication, and accounting (AAA) information that propagates between an end user and an AAA server, which is coupled to the access element, the AAA information being replicated and sent to the client-aware network elements, the access element including a table that identifies a selected one of the client-aware network elements to receive specific AAA data but not all incoming AAA data such that a filtering operation is achieved and only a portion of the incoming AAA data is sent to the selected client-aware network elements.

2. The apparatus of claim 1, wherein the information associated with the communication flow is communicated to one or more of the client-aware network elements in response to a query from one or more of the client-aware network elements.

3. The apparatus of claim 1, further comprising:

a network access server operable to establish the communication flow from an end user associated with the communication flow to the access element.

4. The apparatus of claim 3, wherein the network access server performs internet protocol address management to the end user.

5. The apparatus of claim 1, wherein the access element comprises a database element operable to store portions of data from the communication flow, the portions being communicated intermittently to one or more of the client-aware network elements.

6. The apparatus of claim 1, wherein one or more of the client-aware network elements use the information in order to provide client-specific capabilities to one or more end users associated with the communication flow.

7. The apparatus of claim 1, wherein the access element comprises an intelligence element that instructs the access element to communicate the information associated with the communication flow to a backup client-aware network element in response to a corresponding one of the client-aware network elements being inoperative.

8. A method for monitoring information in a network environment, comprising:

receiving one or more packets from a communication flow initiated by an end user; and

selectively communicating information associated with the communication flow to a plurality of client-aware network elements, wherein the information is authorization, authentication, and accounting (AAA) information that propagates between an end user and an AAA server, which is coupled to an access element, the AAA information being replicated and sent to the client-aware network elements, the access element including a table that identifies a selected one of the client-aware network elements to receive specific AAA data but not all incoming AAA data such that a filtering operation is achieved and only a portion of the incoming AAA data is sent to the selected client-aware network elements.

9. The method of claim 8, wherein the information associated with the communication flow is communicated to one or more of the client-aware network elements in response to a query from one or more of the client-aware network elements.

10. The method of claim 8, further comprising:

performing internet protocol address management for the end user.

11. The method of claim 8, further comprising:

providing AAA functions to one or more end users associated with the communication flow.

12. The method of claim 8, further comprising:

storing portions of data from the communication flow, the portions being communicated intermittently to one or more of the client-aware network elements.

13. The method of claim 8, further comprising:

using the information in order to provide client-specific capabilities to the end user associated with the communication flow.

14. The method of claim 8, further comprising:

providing an instruction to communicate the information associated with the communication flow to a backup client-aware network element in response to a corresponding one of the client-aware network elements being inoperative.

15. A system for monitoring information in a network environment, comprising:

means for receiving one or more packets from a communication flow initiated by an end user; and

means for selectively communicating information associated with the communication flow to a plurality of client-aware network elements, wherein the information is authorization, authentication, and accounting (AAA) information that propagates between an end user and an AAA server, which is coupled to the means for receiving the packets, the AAA information being replicated and sent to the client-aware network elements, the means for receiving the packets including a table that identifies a selected one of the client-aware network elements to receive specific AAA data but not all incoming AAA data such that a filtering operation is achieved and only a portion of the incoming AAA data is sent to the selected client-aware network elements.

16. The system of claim 15, wherein the information associated with the communication flow is communicated to one or more of the client-aware network elements in response to a query from one or more of the client-aware network elements.

17. The system of claim 15, further comprising:

means for establishing the communication flow from the end user to a server.

18. The system of claim 17, further comprising:

means for performing internet protocol address management for the end user.

19. The system of claim 15, further comprising:

means for storing one or more relationships reflecting which types of information associated with the communication flow are to be selectively communicated to one or more of the client-aware network elements.

20. The system of claim 15, further comprising:

means for using the information in order to provide client-specific capabilities to the

end user associated with the communication flow.

21. The system of claim 15, further comprising:

means for providing an instruction to communicate the information associated with the communication flow to a backup client-aware network element in response to a corresponding one of the client-aware network elements being inoperative.

22. A computer readable medium including code for monitoring information in a network environment, the code operable to:

receive one or more packets from a communication flow initiated by an end user; and

selectively communicate information associated with the communication flow to a plurality of client-aware network elements, wherein the information is authorization, authentication, and accounting (AAA) information that propagates between an end user and an AAA server, which is coupled to an access element, the AAA information being replicated and sent to the client-aware network elements, the access element including a table that identifies a selected one of the client-aware network elements to receive specific AAA data but not all incoming AAA data such that a filtering operation is achieved and only a portion of the incoming AAA data is sent to the selected client-aware network elements.

23. The code of claim 22, wherein the information associated with the communication flow is communicated to one or more of the client-aware network elements in response to a query from one or more of the client-aware network elements.

24. The code of claim 22, further operable to:

establish the communication flow from the end user to a server.

25. The code of claim 22, further operable to:

use the information in order to provide client-specific capabilities to the end user associated with the communication flow.

26. The code of claim 22, further operable to:

provide an instruction to communicate the information associated with the communication flow to a backup client-aware network element in response to a corresponding one of the client-aware network elements being inoperative.

27. An apparatus, comprising:

an authentication, authorization, and accounting (AAA) access element operable to receive one or more packets from a communication flow and to selectively communicate information associated with the communication flow to a plurality of client-aware network elements, the information associated with the communication flow being communicated to one or more of the client-aware network elements in response to a query from one or more of the client-aware network elements, the AAA access element including a database element operable to store portions of data from the communication flow, the portions being communicated intermittently to one or more of the client-aware network elements, wherein the information is authorization, authentication, and accounting (AAA) information that propagates between an end user and an AAA server, which is coupled to the access element, the AAA information being replicated and sent to the client-aware network elements, the access element including a table that identifies a selected one of the client-aware network elements to receive specific AAA data but not all incoming AAA data such that a filtering operation is achieved and only a portion of the incoming AAA data is sent to the selected client-aware network elements; and

a network access server operable to establish the communication flow from an end user associated with the communication flow to the AAA access element, the network access server operable to perform internet protocol address management for the end user.