Support IP pool-based configuration

• US 7,558,863 B1
• Filed: 01/30/2003
• Issued: 07/07/2009
• Est. Priority Date: 11/12/1998
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Sitaraman, Aravind, Yager, Charles Troper
• Primary Examiner(s): Blair; Douglas B
• Application Number:
  US10/355,415
• Time in Patent Office: 2,350 Days
• Field of Search: 709/228
• US Class Current: 709/228
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 47/15 in relation to multipoint traffic arrangements for broadcast or multicast in data networks H04L12/18
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/808 User-type aware
• CPC Class Codes: H04L 61/5061 Pools of addresses

Abstract

An address is allocated to a host device which is selected to obtain network access from any access point within a given communications system, while maintaining a settings configuration scheme that is consistently applied to the communications network for the user regardless of the access point used by the user. This is accomplished by assigning a user profile to a subscriber, said user profile including a pool identifier, said pool identifier indicating the settings configuration scheme for the subscriber; using said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure; forwarding said authentication protocol packet to a Network Authentication Server; comparing said one or more attributes to a second data structure, said second data structure indicating the settings configuration scheme associated with said one or more attributes; and configuring settings on the communications network in accordance with the settings configuration scheme.

Claims

1. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for maintaining a settings configuration scheme for a subscriber seeking access to a communications network, said method comprising:

receiving a forwarded authentication protocol packet, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the settings configuration scheme for the subscriber, wherein the user profile is stored in a global memory of the communications network, the global memory containing a collection of user profiles, at least some of which are also stored in a local memory, the global memory operative to provide the user profile assigned to the subscriber if said user profile is unavailable from a local memory;

comparing said one or more attributes to a first data structure, said first data structure indicating the settings configuration scheme associated with said one or more attributes; and

configuring settings on the communications network in accordance with the settings configuration scheme.

2. The program storage device of claim 1, wherein said authentication protocol packet is a RADIUS+ packet.

3. The program storage device of claim 1, wherein the appended attributes are obtained from a second data structure that is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

4. The program storage device of claim 1, wherein said appended attributes are appended by a protocol gateway.

5. The program storage device of claim 4, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

6. The program storage device of claim 1, wherein said first data structure is a record containing a list of attributes and their corresponding settings configuration schemes.

7. The program storage device of claim 1, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

8. The program storage device of claim 1, wherein said method further includes:

providing a second access point to the communications network; and

using said pool identifier if the same subscriber attempts to log-on to said second access point.

9. The program storage device of claim 1, wherein said method further includes:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

10. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for maintaining a Quality of Service level for a subscriber seeking access to a communications network, said method comprising:

receiving a forwarded authentication protocol packet, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the Quality of Service level for the subscriber, wherein the user profile is stored in a global memory of the communications network, the global memory containing a collection of user profiles, at least some of which are also stored in a local memory, the global memory operative to provide the user profile assigned to the subscriber if said user profile is unavailable from a local memory;

comparing said one or more attributes to a first data structure, said first data structure indicating the Quality of Service level associated with said one or more attributes; and

configuring settings on the communications network in accordance with the Quality of Service level.

11. The program storage device of claim 10, wherein said authentication protocol packet is a RADIUS+ packet.

12. The program storage device of claim 10, wherein the appended attributes are obtained from a second data structure that is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

13. The program storage device of claim 10, wherein said appended attributes are appended by a protocol gateway.

14. The program storage device of claim 13, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

15. The program storage device of claim 10, wherein said first data structure is a record containing a list of attributes and their corresponding Quality of Service levels.

16. The program storage device of claim 10, wherein said configuring step includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

17. The program storage device of claim 10, wherein said method further includes:

providing a second access point to the communications network; and

using said pool identifier if the same subscriber attempts to log-on to said second access point.

18. The program storage device of claim 10, wherein said method further includes:

storing addresses in an address pool;

categorizing said addresses into groups which represent service types for subscribers belonging to the communications network; and

allocating to said subscribers user profiles which include pool identifiers that correspond to said service types.

19. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for maintaining Quality of Service levels for subscribers belonging to a communications network regardless of the log-on location of the subscribers, the communications network having a first access point having a local memory, and a second access point, the first access point and the second access point having access to a global memory of the communications network, the method comprising:

assigning a user profile to a subscriber in said local memory, said user profile including a pool identifier, said pool identifier indicating the Quality of Service level for the subscriber, if said subscriber attempts to log-on to said first access point;

obtaining said subscriber'"'"'s pool identifier from the global memory, the global memory having access to said local memory, if said subscriber attempts to log-on to said second access point and the second access point is determined not have said subscriber'"'"'s pool identifier at a local memory of the second access point;

using said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure; and

forwarding said authentication protocol packet to a Network Authentication Server.

20. The program storage device of claim 19, wherein said authentication protocol packet is a RADIUS+ packet.

21. The program storage device of claim 19, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

22. The program storage device of claim 19, wherein said using is performed by a protocol gateway.

23. The program storage device of claim 22, wherein said using is performed by a FilterOutBound state of a protocol gateway.

24. A network authentication server for maintaining a settings configuration scheme for a subscriber seeking access to a communications network, said network authentication server comprising:

an attribute comparer circuit designed to receive a forwarded authentication protocol packet, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the settings configuration scheme for the subscriber, and further designed to compare said one or more attributes to a first data structure, said first data structure indicating the settings configuration scheme associated with said one or more attributes, wherein the user profile is stored in a global memory of the communications network, the global memory containing a collection of user profiles, at least some of which are also stored in a local memory, the global memory operative to provide the user profile assigned to the subscriber if said user profile is unavailable from a local memory; and

a settings configuror circuit designed to configure settings on the communications network in accordance with the settings configuration scheme.

25. The network authentication server of claim 24, wherein said authentication protocol packet is a RADIUS+ packet.

26. The network authentication server of claim 24, wherein the appended attributes are obtained from a second data structure that is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

27. The network authentication server of claim 24, wherein said appended attributes are appended by a protocol gateway.

28. The network authentication server of claim 27, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

29. The network authentication server of claim 24, wherein said first data structure is a record containing a list of attributes and their corresponding settings configuration schemes.

30. The network authentication server of claim 24, wherein said configuring includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

31. A network authentication server for maintaining a Quality of Service level for a subscriber seeking access to a communications network, said network authentication server comprising:

an attribute comparer circuit designed to receive a forwarded authentication protocol packet, said authentication protocol packet having one or more appended attributes, said attributes appended by using a pool identifier, said pool identifier contained in a user profile assigned to the subscriber and said pool identifier indicating the Quality of Service level for the subscriber, wherein the user profile is stored in a global memory of the communications network, the global memory containing a collection of user profiles, at least some of which are also stored in a local memory, the global memory operative to provide the user profile assigned to the subscriber if said user profile is unavailable from a local memory, the attribute comparer further designed to compare said one or more attributes to a first data structure, said first data structure indicating the Quality of Service level associated with said one or more attributes; and

a settings configuror circuit designed to configure settings on the communications network in accordance with the Quality of Service level.

32. The network authentication server of claim 31, wherein said authentication protocol packet is a RADIUS+ packet.

33. The network authentication server of claim 31, wherein the appended attributes are obtained from a second data structure that is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

34. The network authentication server of claim 31, wherein said appended attributes are appended by a protocol gateway.

35. The network authentication server of claim 34, wherein said appended attributes are appended by a FilterOutBound state of a protocol gateway.

36. The network authentication server of claim 31, wherein said first data structure is a record containing a list of attributes and their corresponding settings configuration schemes.

37. The network authentication server of claim 31, wherein said configuring includes alerting all routers on the communications system that the packets from said subscriber should be forwarded at a specific minimum rate.

38. A protocol gateway for maintaining Quality of Service levels for subscribers belonging to a communications network regardless of the log-on location of the subscribers, the communications network having a first access point having a local memory, and a second access point, the first access point and the second access point having access to a global memory of the communications network, the protocol gateway comprising:

a user profile assigner circuit designed to assign a user profile to a subscriber in said local memory, said user profile including a pool identifier, said pool identifier indicating the Quality of Service level for the subscriber, if said subscriber attempts to log-on to said first access point;

an authentication protocol packet appender circuit designed to obtain said subscriber'"'"'s pool identifier from the global memory, the global memory having access to said local memory, if said subscriber attempts to log-on to said second access point and the second access point is determined not have said subscriber'"'"'s pool identifier at a local memory of the second access point, and further designed to use said pool identifier to append one or more attributes to an authentication protocol packet, according to information contained in a first data structure; and

an authentication protocol packet forwarder circuit designed to forward said authentication protocol packet to a Network Authentication Server.

39. The protocol gateway of claim 38, wherein said authentication protocol packet is a RADIUS+ packet.

40. The protocol gateway of claim 38, wherein said first data structure is a record containing a list of pool identifiers and one or more attributes to append to an authentication protocol packet corresponding to each pool identifier.

41. The protocol gateway of claim 38, wherein said using is performed by a protocol gateway.

42. The protocol gateway of claim 41, wherein said using is performed by a FilterOutBound state of a protocol gateway.