Michael D Conner

US Patent:

8341725, Dec 25, 2012

Filed:

Jul 30, 2009

Appl. No.:

12/512239

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

Calix, Inc. - Petaluma CA

International Classification:

H04L 29/06

US Classification:

726 13, 455410, 37039553

Abstract:

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions (“MAC collisions”) may be prevented.

US Patent:

20110029645, Feb 3, 2011

Filed:

Jul 30, 2009

Appl. No.:

12/512245

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

Calix Networks, Inc. - Petaluma CA

International Classification:

G06F 15/177

US Classification:

709221

Abstract:

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions (“MAC collisions”) may be prevented.

US Patent:

20120131097, May 24, 2012

Filed:

Jan 30, 2012

Appl. No.:

13/361433

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

CALIX, INC. - Petaluma CA

International Classification:

G06F 15/16

US Classification:

709203

Abstract:

In general, techniques are described for providing an isolation virtual local area network (VLAN) for layer two access networks. A server comprising an interface and a control unit may implement the techniques. The interface receives a message that initiates a request for a layer three (L3) network address for use by a client device via an isolation virtual local area network (VLAN) that supports transmitting data from a network device to the server, where the network device is intermediately positioned between the client device and the server. The message includes a layer two (L2) address associated with the client device. The control unit determines whether to allow the client device to access the network and assigns the L3 network address to the client device based on the determination.