System and method for providing source awareness in a network environment

• US 7,173,933 B1
• Filed: 06/10/2002
• Issued: 02/06/2007
• Est. Priority Date: 06/10/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: O'Rourke, Chris, Batz, Robert M.
• Primary Examiner(s): Ferris; Derrick
• Application Number:
  US10/166,996
• Time in Patent Office: 1,702 Days
• Field of Search: 370/389, 370/400, 370/401
• US Class Current: 370/389
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/2571 for identification, e.g. for authentication or billing charging arrangements H04L12/14
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A method for communicating in a network environment is provided that includes receiving a request packet and positioning an identifier into the request packet. The identifier may be identified and correlated to a source that generated the request packet. An internet protocol (IP) address associated with the source may be positioned in the request packet before communicating the request packet to a next destination.

Claims

1. An apparatus for communicating in a network environment, the apparatus comprising:

a content switch coupled to a proxy gateway that is operable to cause a computer to execute instructions to perform the following functions position an identifier into a request packet, wherein the content switch is operable to identify the identifier and to correlate the identifier to a source that generated the request packet, the content switch being further operable to receive the request packet and to position an internet protocol (IP) address associated with the source into the request packet before communicating the request packet to a next destination, the request packet being received by a client service packet gateway (CSPG) operable to match one or more IP addresses with one or more source profiles in order to provide one or more networking services to one or more selected sources.

2. The apparatus of claim 1, wherein the content switch comprises a table that includes one or more identifiers that correlate to one or more sources respectively, and wherein each of the sources is operable to generate one or more request packets in the network environment.

3. The apparatus of claim 1, wherein the matching is performed by the CSPG by accessing and querying a database.

4. The apparatus of claim 1, wherein the matching is performed by the CSPG by proxying RADIUS flows associated with a selected one or more sources.

5. The apparatus of claim 1, further comprising:

an authentication, authorization, and accounting (AAA) server coupled to the CSPG and operable to authenticate the source associated with generating the request packet.

6. The apparatus of claim 5, wherein the AAA server operates to authorize the source associated with generating the request packet.

7. The apparatus of claim 5, wherein the AAA server operates to provide accounting services for the source associated with generating the request packet.

8. The apparatus of claim 1, further comprising:

a network access server (NAS) operable to provide a communications interface between the source and the proxy gateway.

9. The apparatus of claim 1, further comprising:

a database coupled to the content switch and operable to store a table that includes one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

10. A method for communicating in a network environment, the method comprising:

receiving a request packet; and

positioning an identifier into the request packet, wherein the identifier may be identified and correlated to a source that generated the request packet, and wherein an internet protocol (IP) address associated with the source may be positioned into the request packet before communicating the request packet to a next destination where the request packet is received, and wherein one or more IP addresses are matched with one or more source profiles in order to provide one or more networking services to one or more selected sources.

11. The method of claim 10, further comprising:

providing a table that includes one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

12. The method of claim 10, wherein the matching is performed by accessing and querying a database.

13. The method of claim 10, wherein the matching is performed by proxying RADIUS flows associated with a selected one or more sources.

14. The method of claim 10, further comprising:

authenticating the source associated with generating the request packet.

15. The method of claim 14, further comprising:

authorizing the source associated with generating the request packet.

16. The method of claim 14, further comprising:

providing accounting services for the source associated with generating the request packet.

17. The method of claim 10, further comprising:

providing a communications interface for the source in order to facilitate propagation of the request packet.

18. The method of claim 10, further comprising:

storing a table that includes one or more identifiers that correlate to one or more sources respectively in a database, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

19. A system for communicating in a network environment, the system comprising:

means for receiving a request packet; and

means for positioning an identifier into the request packet, wherein the identifier may be identified and correlated to a source that generated the request packet, and wherein an internet protocol (IP) address associated with the source may be positioned into the request packet before communicating the request packet to a next destination where the request packet is received, and wherein one or more IP addresses are matched with one or more source profiles in order to provide one or more networking services to one or more selected sources.

20. The system of claim 19, further comprising:

means for storing one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

21. The system of claim 19, wherein the matching is performed by accessing and querying a database.

22. The system of claim 19, wherein the matching is performed by proxying RADIUS flows associated with a selected one or more sources.

23. The system of claim 19, further comprising:

means for authenticating the source associated with generating the request packet.

24. The system of claim 23, further comprising:

means for authorizing the source associated with generating the request packet.

25. The system of claim 23, further comprising:

means for providing accounting services for the source associated with generating the request packet.

26. The system of claim 19, further comprising:

means for providing a communications interface for the source in order to facilitate propagation of the request packet.

27. The system of claim 19, further comprising:

means for storing a table that includes one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

28. Software embodied in a computer readable media and operable to:

receive a request packet; and

position an identifier into the request packet, wherein the identifier may be identified and correlated to a source that generated the request packet, and wherein an internet protocol (IP) address associated with the source may be positioned into the request packet before communicating the request packet to a next destination where the request packet is received, and wherein match one or more IP addresses are matched with one or more source profiles in order to provide one or more networking services to one or more selected sources.

29. The software of claim 28, further operable to:

store one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

30. The software of claim 28, wherein the matching is performed by accessing and querying a database.

31. The software of claim 28, wherein the matching is performed by proxying RADIUS flows associated with a selected one or more sources.

32. The software of claim 28, further operable to:

authenticate the source associated with generating the request packet.

33. The software of claim 32, further operable to:

authorize the source associated with generating the request packet.

34. The software of claim 32, further operable to:

provide accounting services for the source associated with generating the request packet.

35. The software of claim 28, further operable to:

provide a communications interface for the source in order to facilitate propagation of the request packet.

36. The software of claim 28, further operable to:

store a table that includes one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.

37. An apparatus for communicating in a network environment, the apparatus comprising:

a proxy gateway operable to position an identifier into a request packet, wherein the proxy gateway comprises a content switch operable to identify the identifier and to correlate the identifier to a source that generated the request packet, the content switch being further operable to receive the request packet and to position an internet protocol (IP) address associated with the source into the request packet before communicating the request packet to a next destination, wherein the proxy gateway further comprises a client service packet gateway (CSPG) operable to receive the request packet after the IP address associated with the source has been positioned by the content switch and to match one or more IP addresses with one or more source profiles in order to provide one or more networking services to one or more selected sources.

38. The apparatus of claim 37, wherein the content switch comprises a table that includes one or more identifiers that correlate to one or more sources respectively, and wherein each of the sources is operable to generate one or more request packets in the network environment.

39. The apparatus of claim 37, wherein the matching is performed by the CSPG by accessing and querying a database.

40. The apparatus of claim 37, wherein the matching is performed by the CSPG by proxying RADIUS flows associated with a selected one or more sources.

41. The apparatus of claim 37, further comprising:

an authentication, authorization, and accounting (AAA) server coupled to the CSPG and operable to authenticate the source associated with generating the request packet.

42. The apparatus of claim 41, wherein the AAA server operates to authorize the source associated with generating the request packet.

43. The apparatus of claim 41, wherein the AAA server operates to provide accounting services for the source associated with generating the request packet.

44. The apparatus of claim 37, further comprising:

a network access server (NAS) operable to provide a communications interface between the source and the proxy gateway.

45. The apparatus of claim 37, further comprising:

a database coupled to the content switch and operable to store a table that includes one or more identifiers that correlate to one or more sources respectively, wherein each of the sources is operable to generate one or more request packets that propagate in the network environment.