MUX Unit Aggregates Subscriber Packets for Network Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems for providing Ethernet connections in multi-tenant units require excessive IP addresses and configuration efforts due to the need for separate VLANs for each subscriber, leading to increased resource consumption and management complexity.

Innovation Solution

A network device with a MUX unit that aggregates data packets from multiple subscribers into a trunk group, allowing for isolation and switching without the need for individual VLANs for each subscriber, thereby reducing the number of IP addresses and configuration requirements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If separate VLANs are established for each subscriber to provide security and isolation, then subscriber isolation and security are improved, but the number of IP addresses and configuration complexity increase significantly

Engineering Contradiction:
Improvesubscriber isolationVSAvoidconfiguration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple VLANs into a single VLAN by using a MUX unit that aggregates data packets from multiple subscribers into a single trunk group. This allows multiple subscribers to be isolated from each other while sharing a common VLAN configuration, thereby reducing the number of IP addresses and configuration requirements while maintaining security and isolation.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The MUX unit acts as an intermediary between subscribers and the network core. It receives data packets from multiple subscribers, aggregates them into a single trunk group, and forwards them through a single VLAN. This intermediary structure provides isolation at the packet level while maintaining a simplified VLAN configuration.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If separate VLANs are established for each subscriber, then security and isolation are improved, but the number of IP addresses consumed increases

Engineering Contradiction:
Improvesubscriber isolationVSAvoidIP addresses
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges multiple VLANs into a single VLAN by using a MUX unit that aggregates data packets from multiple subscribers into a single trunk group. This allows multiple subscribers to be isolated from each other while sharing a common VLAN configuration, thereby reducing the number of IP addresses and configuration requirements while maintaining security and isolation.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If port configuration VLANs are used for each subscriber, then isolation is improved, but time and money spent on configuration and implementation increase

Engineering Contradiction:
Improvesubscriber isolationVSAvoidconfiguration time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by pre-configuring a single VLAN that can accommodate multiple subscribers. The MUX unit is pre-configured to aggregate packets from multiple ports into this single VLAN, eliminating the need for individual VLAN configuration for each subscriber. This reduces configuration time and resources while maintaining isolation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent merges multiple VLANs into a single VLAN by using a MUX unit that aggregates data packets from multiple subscribers into a single trunk group. This allows multiple subscribers to be isolated from each other while sharing a common VLAN configuration, thereby reducing the number of IP addresses and configuration requirements while maintaining security and isolation.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS7660292B2System and method for isolating network clients
Publication Date: 2010.02.09 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD
  • US7660292B2 patent drawing
  • US7660292B2 patent drawing
  • US7660292B2 patent drawing

AI summary

A network device includes at least one first network port, at least one second network port, a MUX unit and a switching unit. The MUX unit is connected to the at least one first network port. The MUX unit includes a trunk circuit and an output. The trunk circuit is configured to aggregate data packets received at the at least one first port into a trunk group and to output trunked data packets to the output. The switching unit is connected to the output of the MUX unit and to the at least one second network port. The switching unit is configured to switch the trunked data packets to the at least one second network port.