Shai Mohaban

US Patent:

6434624, Aug 13, 2002

Filed:

Jul 23, 2001

Appl. No.:

09/911122

Inventors:

Silvano Gai - San Jose CA
Keith McCloghrie - Middletown NY
Shai Mohaban - Sunnyvale CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1300

US Classification:

709232, 709236, 709238, 709246, 370235

Abstract:

A system within a computer network identifies specific traffic flows originating from a given network entity and requests and applies appropriate policy rules or service treatments to the traffic flows. A network entity includes a flow declaration component that communicates with one or more application programs executing on the entity. The flow declaration component includes a message generator and an associated memory for storing one or more traffic flow data structures. For a given traffic flow, the application program issues one or more calls to the flow declaration component providing it with information identifying the traffic flows. The flow declaration component then opens a flow management session with a local policy enforcer that obtains policy rules or service treatments for the identified flow from a policy server and applies those rules or treatments to the specific traffic flows from the network entity.

US Patent:

6463470, Oct 8, 2002

Filed:

Aug 18, 1999

Appl. No.:

09/376802

Inventors:

Shai Mohaban - Sunnyvale CA
Itzhak Parnafes - Cupertino CA
Yoram Ramberg - Tel-Aviv, IL
Yoram Snir - Moshav Bet Hananya, IL
John Strassner - Fairfield CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1300

US Classification:

709223, 709224

Abstract:

A method and apparatus for storing policies for use in policy-based management of quality of service treatments of network data traffic flows are described. The policies are stored in the form of policy statements. Each policy statement applies to a specific application that runs in the network. Each policy statement includes a condition and a network service to be applied to all traffic matching the condition. Each condition comprises one or more basic condition components connected by operators. Each basic condition comprises a basic policy parameter identifier, an operator and an operand. Policy statements are stored in a Repository, which may be a Directory Server or an X. 500 directory. A policy server may create and store policies in the Repository based on information about the application, the network devices, and the quality of service treatments that the network devices can apply to a traffic flow. An application program and the policy server network device can retrieve the policy information from the Repository using appropriate function calls or an access protocol such as LDAP.

US Patent:

6466984, Oct 15, 2002

Filed:

Jul 2, 1999

Appl. No.:

09/346967

Inventors:

Arad Naveh - Cupertino CA
Itzhak Parnafes - Cupertino CA
Shai Mohaban - Sunnyvale CA
Steven M. Woo - Redwood Shores CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1516

US Classification:

709228, 709220, 709221, 709222, 709226, 709227, 370229, 370230, 370231, 370235, 370236

Abstract:

A method and apparatus for policy-based management of quality of service treatments of network data traffic flows by integrating policies with application programs are described. In one embodiment, a quality of service value is selectively associated with a flow of information generated by an application program and directed to a network device. Mappings representing an abstract policy and associating a pre-determined network quality of service with a traffic flow type of the flow of information and with an application program are created and stored in a repository that is accessible by the application program. The mappings are converted into one or more settings of the network device. The policy is enforced at the network device in response to receiving traffic from the application program that matches the traffic flow type. The settings may be Differentiated Services Code Points or may be RSVP+ messages. Policies may be represented by statements stored in a directory schema.

US Patent:

6651101, Nov 18, 2003

Filed:

Jul 9, 2002

Appl. No.:

10/191605

Inventors:

Silvano Gai - San Jose CA
Keith McCloghrie - Middletown NY
Shai Mohaban - Sunnyvale CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1516

US Classification:

709224, 709235, 709238

Abstract:

A system within a computer network identifies specific traffic flows originating from a given network entity and requests and applies appropriate policy rules or service treatments to the traffic flows. A network entity includes a flow declaration component that communicates with one or more application programs executing on the entity. The flow declaration component includes a message generator and an associated memory for storing one or more traffic flow data structures. For a given traffic flow, the application program issues one or more calls to the flow declaration component providing it with information identifying the traffic flows. The flow declaration component then opens a flow management session with a local policy enforcer that obtains policy rules or service treatments for the identified flow from a policy server and applies those rules or treatments to the specific traffic flows from the network entity.

US Patent:

6718380, Apr 6, 2004

Filed:

Aug 8, 2002

Appl. No.:

10/215543

Inventors:

Shai Mohaban - Sunnyvale CA
Itzhak Parnafes - Palo Alto CA
Yoram Ramberg - Tel-Aviv, IL
Yoram Snir - D.N., IL
John Strassner - Colorado Springs CO

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1300

US Classification:

709223, 709224

Abstract:

A method and apparatus for storing policies for use in policy-based management of quality of service treatments of network data traffic flows are described. The policies are stored in the form of policy statements. Each policy statement applies to a specific application that runs in the network. Policy statements are stored in a Repository, which may be a Directory Server or an X. 500 directory. A policy server may create and store policies in the Repository based on information about the application, the network devices, and the quality of service treatments that the network devices can apply to a traffic flow. An application program and the policy server network device can retrieve the policy information from the Repository using appropriate function calls or an access protocol such as LDAP.

US Patent:

6721272, Apr 13, 2004

Filed:

Oct 8, 1999

Appl. No.:

09/415952

Inventors:

Itzhak Parnafes - Cupertino CA
Shai Mohaban - Sunnyvale CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G08C 1500

US Classification:

370235, 370410

Abstract:

A method and apparatus for providing RSVP capability for senders that either cannot or do not initiate RSVP processes is provided. An RSVP proxy is connected between a sender device and a receiver device on a computer network. The RSVP proxy detects a new traffic flow and determines whether an RSVP PATH message is appropriate for the traffic flow. If it is so determined, the RSVP proxy generates and communicates the RSVP PATH message through the network to the receiver device. The appropriateness of an RSVP PATH message can be based upon predetermined relationships or logic involving one or more of network parameters, transport parameters, and characteristics of the traffic flow, whether another RSVP signal is detected associated with the traffic flow, and other traffic flow attributes determined from decoding the traffic flow packets. The RSVP proxy can also interface with a policy server on the network to facilitate generation of the RSVP PATH message according to one or more of the traffic flow attributes. Alternatively, the RSVP proxy can include the policy server functionality itself.

US Patent:

6788647, Sep 7, 2004

Filed:

Nov 19, 1999

Appl. No.:

09/443947

Inventors:

Shai Mohaban - Sunnyvale CA
Itzhak Parnafes - Cupertino CA

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 1256

US Classification:

370235, 370389

Abstract:

A method and apparatus are provided for automatic reverse-direction or bi-directional quality of service treatment of network data flows. A network device located at the edge or border of a network, such as a router that is connected to another network, identifies a data flow originating within its network and directed outside the network, and having packets set with quality of service treatment values. Identified quality of service treatments may be IP precedence, DSCP marking of packets in the flow, an RSVP PATH message, etc. The network device creates and stores, in its local memory, values that uniquely identify the flow and that tell the device how to treat packets of the same flow that are transmitted in the opposite or inbound direction. Upon identifying a corresponding inbound flow with quality of service treatment, all packets of the flow are given a pre-configured quality of service treatment based upon the quality of service treatment of the originally identified flow.

US Patent:

6839766, Jan 4, 2005

Filed:

Jan 14, 2000

Appl. No.:

09/482326

Inventors:

Itzhak Parnafes - Cupertino CA, US
Shai Mohaban - Sunnyvale CA, US
Keith McCloghrie - San Jose CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 1516

US Classification:

709232, 709228, 370466

Abstract:

A method and apparatus for communicating a COPS protocol policy to a non-COPS-enabled network device (i. e. , a device or one or more interfaces included in the device) is provided. A COPS proxy is networked with a policy server and a non-COPS-enabled network device such that the COPS proxy can communicate with the policy server and the non-COPS-enabled network device. The policy server is configured to communicate COPS protocol policies to the COPS proxy, which, in turn, is configured to translate the COPS protocol policy into a policy that is in accordance with a policy protocol that the non-COPS-enabled network device can receive and correctly interpret (a “non-COPS protocol”). The translation of the policy utilizes a mapping database that delineates predetermined relationships between COPS protocol policies and the non-COPS protocol policies. More specifically, the mapping database can include relationships between COPS protocol policy information base variables, network device roles and characteristics, and non-COPS protocol parameters and associated values. Further, the COPS proxy can be configured to detect and reconcile policy conflicts for one or more network devices.