Abstract:
A method for providing a secure local area network includes the steps of receiving a data packet having a destination address and comparing the destination address to stored end station addresses. The data packet is disrupted on the repeater (12) for the ports except the port with an associated stored end station address matching the destination address. Also, the disrupting of the data packet can be enabled on an individual port basis. A system includes a controller (104), a memory/comparator (102), and an inverse disrupt control mechanism (108). The inverse disrupt control mechanism produces a disrupt signal to disrupt the data packet on non-matching ports of the repeater when a match occurs within the repeater. The data packet is not disrupted on a port linking two repeaters when there is no match within the repeater. The inverse disrupt control can also be enabled or disabled on an individual port basis.
Abstract:
A secure repeater implementing data packet masking includes a programmable and selective, on a per port basis, multicast response. A multicast controller (70x) receives a multicast identifier extracted from a destination address field of a data packet. A plurality of memories, one associated with each port (85x), determines the associated ports response to the multicast identifier. Each memory stores a multicast control code. When the multicast control code for a particular port has a value indicating that the associated port is enabled to receive multicast packets, assertion of the multicast identifier to the multicast controller for the particular port results in disabling the security masking for the port and subsequent transmission of unmodified data from the particular port.
Abstract:
A method and apparatus for efficiently transferring a data packet on a network. The efficient transfer of data includes compressing the data as the data packet is transmitted from a repeater (12) to a management unit (10). The method determines if a destination address of a received packet matches a stored management unit address. When the stored address does not match the destination address, the data packet is compressed. The apparatus includes a repeater, a management unit, and a packet compression mechanism (26). The apparatus further includes comparator circuit means (38, 44) for determining address comparisons and count comparisons to control data compression.
Abstract:
In a managed repeater (10) having an address learn capability wherein receipt at a particular port (30) of a data packet having a received source address different from a stored source address associated with the particular port replaces the stored source address with the received source address, a source address locking circuit includes an address learn circuit associated with the particular port, for replacing the stored source address with the received source address when the stored source address does not match the received source address, and an address lock register for the particular port, coupled to the address learn circuit, for storing a bit value to disable the address learn circuit from replacing the stored source address with the received source address. This managed repeater provides improved security in a network having source address updating by allowing an administrator to disable the source address update for a particular port in the managed repeater. Each address lock register is externally programmable, and the administrator is able to program time windows to disable source address updating for a particular port. The administrator may program each address lock register independently to prevent the stored source address associated with each port from being updated. The managed repeater allows the administrator to determine on a per port basis whether the managed repeater's address learning capability should be enabled or disabled for a programmable time window.
Abstract:
Apparatus and method for simply, efficiently and economically accessing every media attachment unit (MAU) (115) management information base (MIB) in a managed repeater (100). MAU MIBs pass through a repeater to a management unit (110) that accesses the repeater for all of the MAU MIBs, in addition to the repeater MIB. Conversely, the management unit passes MAU control information to the MAUs through the repeater. Because all the MIBs in the managed repeater are accessed through the single device, a simple microprocessor interface is used to connect the repeater to the management unit. Also, the managed repeater signals, by generation of an interrupt for example, any changes in the MAU MIB to the management unit. In addition, the management unit easily determines which MAU caused a particular interrupt because all interrupt status signals are consolidated into registers in the repeater. The status signals are stored in a particular format to assist identification of status conditions for particular MAUs.
Abstract:
A secure repeater (20) implementing data packet masking includes a programmable and selective, on a per port basis, disrupt response responsive to any of several selectable qualifying conditions. A disrupt controller (70) receives signals indicating various characteristics of fields of a data packet, and other conditions. A register bank (76) includes a plurality of memories, one associated with each port and some of the conditions, assists the disrupt controller to determine the associated port's disrupt response to the data packet. Each memory stores a disrupt control code. When the disrupt control code for a particular port has a value indicating that the associated port is enabled, deassertion of a condition signal associated with that control code results in disruption of a data packet. A cell array (200) permits simple, efficient scaling and formation of integrated semiconductor structures to implement complex disrupt logic equations.
Abstract:
A circuit including a data formatter (70) for receiving desired information associated with a data packet and arranging the bits into a format for transfer to a memory (80), a memory for storing the desired information for later access by a microprocessor (20), and a controller (90) for selectively transferring and writing the desired information from the data formatter to said memory. The circuit provides improved performance by storing only the desired information for a data packet having an error. That is, information internal to the data packet itself, such as the source address, and information external to the data packet, such as the repeater port number, in addition to data packet error information, such as error conditions, may be stored as an error statistic in a memory for a microprocessor to read at its leisure. The present invention has an advantage of being more efficient and economical in gathering error statistics of data packets, as well as providing an increased capability to determine sophisticated error statistics on a packet-by-packet basis.
Abstract:
An interface to an indicator array (25) for providing status information from a repeater (20) used in a computer network (10). The interface multiplexes status value signals from the repeater provided to a group of enabled source buffers (55) driving columns of the array. Rows of the array are driven by status enable signals from a sink buffer (70) attached to each row. LEDs (30) of the array have an anode connected to a source buffer and a cathode connected to a sink buffer. Cycling through the source buffer groups and status enable signals provides a 10 % duty cycle for each indicator. When status values change more frequently than about once per millisecond, a pulse stretcher is used to extend the perceived duration of the status indication.
Abstract:
A method and system for providing statistical network information carried in a data packet (8) being transmitted on a network. The method includes the steps of receiving a data packet having a data portion on a repeater (12) and transferring the data portion to a management unit (10). The method further includes the step of appending statistical information to the data portion during an inter-packet gap period. The apparatus for increasing information in a data packet on a network includes a repeater mechanism, a management unit mechanism, and a packet tagging circuit. The repeater mechanism receives a data packet having a data portion, the management unit mechanism determines statistical information based on the data packet, and the packet tagging circuit appends information to the data portion of the data packet during an inter-packet gap period.
Abstract:
A secure repeater (20) implementing data packet masking includes a programmable and selective, on a per port basis, delay disrupt response. A delay disrupt controller (70) receives signals indicating retransmissions of fields from a data packet. These signals include a destination address field and a source address field. A plurality of memories, one associated with each port, determines the associated port's delay response to the data packet. Each memory stores a delay disrupt control code. When the delay disrupt control code for a particular port has a value indicating that the associated port is enabled to delay disruption of a data packet, security marking is disabled until the source address field is retransmitted from the particular port.