Dynamic binding of network services

• US 8,130,764 B1
• Filed: 10/09/2007
• Issued: 03/06/2012
• Est. Priority Date: 12/24/1998
• Status: Expired due to Term

• Current Assignee: Ericsson AB (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Ericsson AB (Telefonaktiebolaget LM Ericsson)
• Inventors: Salkewicz, William
• Primary Examiner(s): Wilson, Robert
• Assistant Examiner(s): KAMARA, MOHAMED A
• Application Number:
  US11/869,741
• Time in Patent Office: 1,610 Days
• Field of Search: 370/389, 370/396, 709/223
• US Class Current: 370/398
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Abstract

A method and apparatus that dynamically binds one or more network interfaces of a plurality of virtual network machines is described. The apparatus instantiates the plurality of virtual network machines, where the plurality of virtual network machines are virtually independent but share a set of physical resources within the single network device and each of the plurality of virtual network machines belong to a different network domain. The apparatus receives subscriber records that are associated with virtual circuits on a plurality of ports on the apparatus. The apparatus dynamically binds the one or more network interfaces of each of the virtual machines to a set of sub-interfaces, such that each of the virtual circuits is communicatively coupled with one of the virtual network machines and the bindings are represented with data structures.

Claims

1. An apparatus comprising:

a single network device, to be coupled between a plurality of subscriber end stations and a plurality of network domains to communicate packets there between, including, a set of one or more processors;

a first plurality of transceivers to communicate said packets with the plurality of subscriber end stations;

a second plurality of transceivers to communicate said packets with the plurality of network domains; and

a non-transitory machine-readable medium having stored therein a set of one or more instructions to cause the set of one or more processors to,

instantiate a plurality of virtual network machines, wherein the plurality of virtual network machines are virtually independent but share a set of one or more physical resources within the single network device, wherein each of the plurality of virtual network machines is one of a virtual router and a virtual bridge, and wherein each of the plurality of virtual network machines belong to a different respective one of the plurality of network domains,

dynamically bind different sub-interfaces with network interfaces of different ones of the virtual network machines based on network domains identified by subscriber records to communicatively couple different ones of the plurality of subscriber end stations with different ones of the plurality of network domains, wherein the bindings are represented with a plurality of data structures, wherein each of a plurality of subscribers is associated with at least one of the plurality of subscriber end stations, wherein each of the subscriber end stations is associated with at least one of the sub-interfaces, and wherein the subscriber

records identify, for different ones of the plurality of subscribers, different ones of the plurality of network domains to which the different ones of the virtual network machines belong, and

communicate said packets between the plurality of subscriber end stations and the plurality of network domains.

2. The apparatus of claim 1, wherein the set of instructions further causes the set of processors to retrieve the subscriber records from a server that runs authentication, authorization, and accounting protocols.

3. The apparatus of claim 1, wherein the set of instructions further causes the set of processors to change the binding of one of the sub-interfaces to one of the network interfaces that is of a different one of said virtual network machines, wherein the binding change is based on the subscriber'"'"'s subscriber record.

4. The apparatus of claim 3, wherein the binding change is further based on time of day.

5. The apparatus of claim 3, wherein the binding change is further based on a change in service for the subscriber.

6. The apparatus of claim 1, wherein at least one of the subscriber records indicates which of a multiple of the plurality of the network domains the subscriber associated with that subscriber record has access to.

7. The apparatus of claim 1, wherein one of the network interfaces is a layer 2 network interface, and wherein one of the sub-interfaces is a layer 2 sub-interface, and wherein one of the plurality of binding data structures is a layer 2/2 binding structure that binds the layer 2 sub-interface interface to the layer 2 network interface.

8. The apparatus of claim 1, wherein different ones of the plurality of the network domains provide access to different ones of a plurality of service providers.

9. An apparatus comprising:

a single network device including,

a set of one or more processors;

a plurality of transceivers to communicate a plurality of independent information flows of packets through the single network device between a plurality of end stations; and

a non-transitory machine-readable medium having stored therein a set of one or more instructions to cause the set of one or more processors to,

instantiate a plurality of virtual network machines to forward the plurality of independent information flows through the single network device, wherein the plurality of virtual network machines are virtually independent but share a set of one or more physical resources within the single network device, wherein each of the plurality of virtual network machines is one of a virtual router and a virtual bridge, wherein the plurality of virtual network machines belong to different network domains with accounting and authorizations for different administrative authorities, wherein each of the virtual network machines includes one or more network interfaces, wherein each of the plurality of transceivers is associated with at least one of a set of one or more sub-interfaces, and wherein each of the plurality of independent information flows is associated with a different one of the set of one or more sub-interfaces, and dynamically bind, with a plurality of binding data structures, different ones of the sub- interfaces with the network interfaces of different ones of the virtual network machines to couple each of the plurality of independent information flows with a currently appropriate one of the plurality of virtual network machines based on current authorizations, and wherein the bindings are changed responsive to changes in the current authorizations.

10. The apparatus of claim 9, wherein the set of instructions further causes the set of processors to retrieve the current authorizations from a server that runs authentication, authorization, and accounting protocols.

11. The apparatus of claim 9, wherein the set of instructions further causes the set of processors to change the binding of one of the sub-interfaces to one of the network interfaces that is of a different one of said set virtual network machines.

12. The apparatus of claim 11, wherein the binding change is based on time of day.

13. The apparatus of claim 11, wherein the binding change is based on a change in service.

14. The apparatus of claim 9, wherein at least one of the current authorizations indicates which of a multiple of the different network domains one of the plurality of independent information flows has access to.

15. The apparatus of claim 9, wherein one of the network interfaces is a layer 2 network interface, and wherein one of the sub-interfaces is a layer 2 sub-interface, and wherein one of the plurality of binding data structures is a layer 2/2 binding structure that binds the layer 2 sub-interface to the layer 2 network interface.

16. The apparatus of claim 9, wherein one of the network interfaces is a layer 3 network interface, and wherein one of the sub-interfaces is a layer 2 sub-interface, and wherein one of the plurality of binding data structures is a layer 2/3 binding structure that binds the layer 2 sub-interface to the layer 3 network interface.

17. A network comprising:

a plurality of different network domains, wherein each of the different network domains comprises a plurality of nodes and links and each of the different network domains is virtually isolated from the other network domains;

a plurality of subscriber end stations; and

a single network device coupled between nodes of the different network domains and the plurality of subscriber end stations to communicate packets there between, the single network device having,

a first plurality of transceivers to communicate said packets with the plurality of subscriber end stations;

a second plurality of transceivers to communicate said packets with the plurality of different network domains; and

a plurality of virtual network machines, wherein the plurality of virtual network machines are virtually independent but share a set of one or more physical resources within the single network device, wherein each of the plurality of virtual network machines is one of a virtual router and a virtual bridge, wherein each of the plurality of virtual network machines belong to one of the plurality of different network domains, and

bindings that dynamically bind different sub-interfaces with network interfaces of different ones of the virtual network machines based on network domains identified by subscriber records to communicatively couple different ones of the plurality of subscriber end stations with different ones of the plurality of different network domains, wherein the bindings are represented with a plurality of data structures, wherein each of a plurality of subscribers is associated with at least one of the plurality of subscriber end stations, wherein each of the subscriber end stations is associated with at least one of the sub-interfaces, wherein the subscriber records identify, for different ones of the plurality of subscribers, different ones of the plurality of different network domains to which the different ones of the virtual network machines belong, and wherein each of the sub-interfaces comprise information that identifies an encapsulation protocol, packet compression technique, and a protocol to be used to communicate said packets.

18. The network of claim 17, wherein the single network device changes the binding of one of the sub-interfaces to one of the network interfaces that is of a different one of said virtual network machines, wherein the binding change is based on the subscriber'"'"'s subscriber record.

19. The network of claim 18, wherein the binding change is further based on time of day.

20. A computerized method comprising:

instantiating a plurality of virtual network machines, wherein the plurality of virtual network machines are virtually independent but share a set of one or more physical resources within a single network device, wherein each of the plurality of virtual network machines is one of a virtual router and a virtual bridge, and wherein each of the plurality of virtual network machines belong to a different one of a plurality of network domains;

dynamically binding different sub-interfaces with network interfaces of different ones of the virtual network machines based on network domains identified by subscriber records to communicatively couple different ones of a plurality of subscriber end stations with different ones of the plurality of network domains, wherein the bindings are represented with a plurality of data structures, wherein each of a plurality of subscribers is associated with at least one of the plurality of subscriber end stations, wherein each of the subscriber end stations is associated with at least one of the sub-interfaces, wherein the subscriber records identify, for different ones of the plurality of subscribers, different ones of the plurality of network domains to which the different ones of the virtual network machines belong, and wherein each of the sub-interfaces comprise information that identifies an encapsulation protocol, packet compression technique, and a protocol to be used to communicate said packets; and

communicating said packets between the plurality of subscriber end stations and the plurality of network domains.

21. The computerized method of claim 20, further comprising changing the binding of one of the sub-interfaces to one of the network interfaces that is of a different one of said virtual network machines, wherein the binding change is based on the subscriber'"'"'s subscriber record.

22. The computerized method of claim 21, wherein the binding change is further based on time of day.

23. The computerized method of claim 21, wherein the binding change is further based on a change in service for the subscriber.

24. The computerized method of claim 20, wherein at least one of the subscriber records indicates which of a multiple of the plurality of network domains a subscriber associated with that subscriber record has access to.