Apparatus and method that provides a primary server and a backup server that both support a RADIUS client and share an IP address

• US 7,228,459 B2
• Filed: 05/19/2003
• Issued: 06/05/2007
• Est. Priority Date: 05/19/2003
• Status: Expired due to Fees

• Current Assignee: Tellabs Petaluma, Inc. (Infinera Corp.)
• Original Assignee: Tellabs Petaluma, Inc. (Infinera Corp.)
• Inventors: Krishnan, Jhaanaki, Yang, Weifang, Jiang, Tsang Ming
• Primary Examiner(s): Beausoliel; Robert
• Assistant Examiner(s): Riad; Amine
• Application Number:
  US10/440,775
• Publication Number:
  US 20040250173A1
• Time in Patent Office: 1,478 Days
• Field of Search: 714/43, 714/13, 714/11, 710/105
• US Class Current: 714/43
• CPC Class Codes: H04L 69/00 Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass networks security protocols H04L9/40; wireless communication networks H04W

Abstract

A primary server and a backup server that both run a RADIUS client in a cold start configuration share a single IP address that includes a limited number of message identifiers (MIDs). The primary server and the backup server each have a small number of fixed message identifiers. In addition, a large number of shared message identifiers are used by the primary server, and then used by the backup server a predetermined time after the primary server fails.

Claims

1. A method of operating a network access system that has a primary system and a backup system, the primary system having a first plurality of message identifiers, the backup system having a second plurality of message identifiers, the method comprising:

detecting a failure condition in the primary system;

starting a timer after the failure condition has been detected;

assigning message identifiers from the second plurality of message identifiers to connection requests that are received after the timer has started and before the timer has expired; and

assigning message identifiers from the first plurality of message identifiers and the second plurality of message identifiers to connection requests that are received after the timer expires.

2. The method of claim 1 wherein the first plurality of message identifiers is larger than the second plurality of message identifiers.

3. The method of claim 1 wherein the first plurality of message identifiers is substantially larger than the second plurality of message identifiers.

4. The method of claim 1 and further comprising assigning message identifiers from only the first plurality of message identifiers to connection requests that are received before the failure condition is detected in the primary system.

5. The method of claim 1 wherein the first plurality of message identifiers include a fixed range of message identifiers and a shared range of message identifiers.

6. The method of claim 5 wherein message identifiers from only the shared range of message identifiers are assigned to connection requests that are received after the timer has expired.

7. The method of claim 6 wherein the shared range of message identifiers is substantially larger than the fixed range of message identifiers.

8. The method of claim 1 wherein the backup system detects the failure condition, and starts the timer after the failure condition has been detected.

9. A method of operating a network access system that has a primary system and a backup system, the primary system having a first plurality of message identifiers, the backup system having a second plurality of message identifiers, the method comprising:

forming the first plurality of message identifiers to be larger than the second plurality of message identifiers, the first plurality of message identifiers including a fixed range of message identifiers and a shared range of message identifiers; and

assigning message identifiers from only the first plurality of message identifiers to connection requests that are received before a failure condition is detected in the primary system.

10. The method of claim 9 wherein message identifiers from only the shared range of message identifiers are assigned to connection requests that are received after the timer has expired.

11. The method of claim 9 wherein the shared range of message identifiers is substantially larger than the fixed range of message identifiers.

12. A method of operating a network access system that has a primary system and a backup system, the primary system having a first plurality of message identifiers, the backup system having a second plurality of message identifiers, the method comprising:

forming the first plurality of message identifiers to be larger than the second plurality of message identifiers; and

assigning message identifiers from only the first plurality of message identifiers to connection requests that are received before a failure condition is detected in the primary system, the primary system outputting a failure signal to the backup system after the failure condition occurs.

13. A method of operating a network access system that has a primary system and a backup system, the method comprising:

defining a group of message identifiers;

assigning the group of message identifiers to a single IP address;

assigning a first number of message identifiers from the group of message identifiers to only the primary system;

assigning a second number of message identifiers from the group of message identifiers to only the backup system;

assigning a third number of message identifiers from the group of message identifiers to the primary system;

detecting a failure of the primary system; and

starting a timer after the failure has been detected.

14. The method of claim 13 and further comprising:

receiving connection requests from users;

assigning message identifiers from the second number of message identifiers to connection requests that are received from users by the backup system after the timer has started and before the timer has expired; and

assigning message identifiers from the second number of message identifiers and the third number of message identifiers to connection requests that are received from users by the backup system after the timer expires.

15. The method of claim 14 wherein each message identifier identifies information associated with a connection request received from a user.

16. A method of operating a backup system comprising:

detecting a failure of a primary system to process connection requests from users;

starting a timer after the failure has been detected;

receiving connection requests from users;

assigning message identifiers from a first group of message identifiers to connection requests received from users after the timer has started and before the timer has expired, the primary system assigning message identifiers from a second group of message identifiers to connection requests received from users before the backup system detects a failure, the first group and the second group having different members; and

assigning message identifiers from a third group of message identifiers to connection requests received after the timer expires, the second and third groups having different and common members.

17. The machine-readable medium of claim 16 wherein the first, second, and third group of message identifiers are assigned to a single IP address.

18. A machine-readable medium having stored thereon sequences of instructions, the sequences of instructions including instructions which, when executed by a processor in a backup system, causes the processor to perform:

detecting a failure of a primary system to process connection requests from users;

starting a timer after the failure has been detected;

receiving connection requests from users;

assigning message identifiers from a first group of message identifiers to connection requests received from users after the timer has started and before the timer has expired, the primary system assigning message identifiers from a second group of message identifiers to connection requests received from users before the backup system detects a failure, the first group and the second group having different members; and

assigning message identifiers from a third group of message identifiers to connection requests received after the timer expires, the second and third groups having different and common members.

19. The machine-readable medium of claim 18 wherein the first, second, and third group of message identifiers are assigned to a single IP address.