Automatic hardware failure detection and recovery for distributed max sessions server

• US 8,078,715 B2
• Filed: 10/19/2010
• Issued: 12/13/2011
• Est. Priority Date: 09/30/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Shively, Darrell Myers II, Knight, John, Patil, Kavita Shekhar, Boyd, Pauline Chen, Bui, Sonny, Roden, Thomas Anthony
• Primary Examiner(s): BLAIR, DOUGLAS B
• Application Number:
  US12/907,900
• Publication Number:
  US 20110035496A1
• Time in Patent Office: 420 Days
• Field of Search: 709/219, 709/223, 726/3
• US Class Current: 709/223
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A Max Sessions Server (MSS) automatically detects hardware and communications failures. Upon detection, counters are adjusted accordingly to maintain an accurate count of users or groups of users on a system. A database of unique identifiers for each connection is maintained, where the unique identifier is a concatenation of a Network Access Server (NAS) and the connection'"'"'s incoming NAS node number. If a user requests permission to log into the system, the MSS first checks the database to determine if the unique identifier is already logged in. If so, then a hardware or communications failure has occurred and the MSS must make the appropriate adjustments to the database and counter.

Claims

1. A method comprising:

generating a new unique identification value (UIV) for a new network connection initiated by a request from a current user to log in to a data communications network;

comparing the new UIV to a master list of a plurality of entries, each entry including;

an established UIV for an established network connection through a respective port on one of one or more network access servers (NASs) in the data communications network, the established network connection resulting from a previous request from a user to log in to the respective port; and

respective group identification information for the user associated with the previous request to log in to the respective port;

identifying an existing entry in the master list indicating an abnormal disconnection of a previously logged in user;

changing a first counter to indicate a first group of users contains one less logged in user, the first group identified by group identification information in the existing entry; and

authorizing the new network connection if a predetermined maximum number of sessions for a second group of users has not been met, the current user belonging to the second group of users.

2. The method of claim 1, wherein the changing the first counter includes decrementing the first counter.

3. The method of claim 1, further comprising

incrementing a second counter associated with the second group of users if the predetermined maximum number of sessions has not been met.

4. The method of claim 1, wherein the new network connection is authorized if the first group of users and the second group of users are the same.

5. The method of claim 1, further comprising:

clearing the existing entry from the master list and adding a new entry to the master list, the new entry including the new UIV and group identification information of the current user.

6. The method of claim 1, wherein the request from the current user to log in is made through a first port of a first NAS of the one or more NASs, and

wherein the generating further comprises forming the new UIV from a port identifier associated with the first port and a NAS identifier associated with the first NAS.

7. The method of claim 1, wherein each established UIV of the plurality of entries is formed from a NAS identifier associated with a respective NAS of the one or more NASs and from a port identifier associated with a respective port of the respective NAS.

8. The method of claim 1, further comprising:

rejecting the current user'"'"'s request to log in to the data communications network if the log in would cause the second counter associated with the second group to exceed the predetermined maximum number of sessions.

9. An apparatus comprising:

a memory element including a master list of a plurality of entries, each entry including;

an established unique identification value (UIV) for an established network connection through a respective port on one of one or more network access servers (NASs) in a data communications network, the established network connection resulting from a previous request from a user to log in to the respective port; and

respective group identification information for the user associated with the previous request to log in to the respective port; and

a processor operable to execute instructions for maintaining the master list and for authorizing network connections in the data communications network, including;

generating a new unique identification value (UIV) for a new network connection initiated by a request to log in to the data communications network from a current user;

identifying an existing entry in the master list indicating an abnormal disconnection of a previously logged in user;

changing a first counter to indicate a first group of users contains one less logged in user, the first group identified by group identification information in the existing entry; and

authorizing the new network connection if a predetermined maximum number of sessions for a second group of users has not been met, the current user belonging to the second group of users.

10. The apparatus of claim 9, wherein the changing the first counter includes decrementing the first counter.

11. The apparatus of claim 9, wherein the processor is operable to execute further instructions including incrementing a second counter associated with the second group of users if the predetermined maximum number of sessions has not been met.

12. The apparatus of claim 9, wherein the new network connection is authorized if the first group of users and the second group of users are the same.

13. The apparatus of claim 9, wherein the processor is operable to execute further instructions including:

clearing the existing entry from the master list and adding a new entry to the master list, the new entry including the new UIV and group identification information of the current user.

14. The apparatus of claim 9, wherein the request from the current user to log in is made through a first port of a first NAS of the one or more NASs, and

wherein the generating further comprises forming the new UIV from a port identifier associated with the first port and a NAS identifier associated with the first NAS.

15. The apparatus of claim 9, wherein each established UIV of the plurality of entries is formed from a NAS identifier associated with a respective NAS of the one or more NASs and from a port identifier associated with a respective port of the respective NAS.

16. The apparatus of claim 9, wherein the processor is operable to execute further instructions including:

rejecting the current user'"'"'s request to log in to the data communications network if the log in would cause the second counter associated with the second group to exceed the predetermined maximum number of sessions.

17. The apparatus of claim 9, wherein the apparatus is a Max Sessions Server (MSS).

18. The apparatus of claim 9, wherein the apparatus is a Resource Control Server (RCS).

19. Logic encoded in one or more non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

generating a new unique identification value (UIV) for a new network connection initiated by a request from a current user to log in to a data communications network;

comparing the new UIV to a master list of a plurality of entries, each entry including;

an established UIV for an established network connection through a respective port on one of one or more network access servers (NASs) in the data communications network, the established network connection resulting from a previous request from a user to log in to the respective port; and

respective group identification information for the user associated with the previous request to log in to the respective port;

identifying an existing entry in the master list including an established UIV equivalent to the new UIV, the existing entry indicating an abnormal disconnection of a previously logged in user; and

changing a counter to indicate a first group of users contains one less logged in user, the first group identified by group identification information in the existing entry.

20. The logic of claim 19 encoded in one or more non-transitory media that includes code for execution and when executed by a, processor is operable to perform further operations comprising:

authorizing the new network connection if a predetermined maximum number of sessions for a second group of users has not been met, the current user belonging to the second group of users.