text:
This specification describes a system and method that can offer, among other advantages, a technique for resource assignment that involves obtaining a group of resources, repeatedly selecting a resource from the group of resources until a resource that is available is selected, and associating a client or process with that resource. An example of a method according to the technique includes obtaining a group of VLANs for assignment to a client based on client identity, selecting a first choice from the group of VLANs, selecting a next choice from the group of VLANs if the first choice is unavailable, and connecting the client to the selected VLAN. The client identity may include, by way of example but not limitation, a MAC address, an SSID, or some other known or convenient way to identify the client. A system constructed according to the technique may include, by way of example but not limitation, memory, a resource group name decoder, a value calculator, an index calculator, and a selector. The memory may include, for example, a resource name buffer, an identity buffer, a result buffer, a resource count buffer, a resource name array, and a selected resource buffer.
1. A system comprising:
memory, including:
a resource name buffer;
an identity buffer;
a result buffer;
a virtual local area network (VLAN) resource count buffer;
a VLAN resource name array;
a selected VLAN resource buffer;
a VLAN resource group name decoder coupled to the resource name buffer, VLAN resource count buffer, and VLAN resource name array;
a value calculator coupled to the identity buffer and the result buffer;
an index calculator coupled to the VLAN resource count buffer;
a selector coupled to the index calculator, VLAN resource name array, and selected VLAN resource buffer;
wherein, in operation, one or more processors are employed such that:
an encoded resource name is stored in the resource name buffer;
an identity parameter is stored in the identity buffer;
the VLAN resource group name decoder reads the encoded resource name, decodes the name to obtain decoded list elements, writes a count of the list elements to the VLAN resource count buffer, and writes the decoded list elements to the VLAN resource name array;
the value calculator processes the identity parameter stored in the identity buffer to produce a value that is stored in the result buffer;
the index calculator takes the value stored in the result buffer modulo the count of the list elements stored in the VLAN resource count buffer;
the selector uses the result of the index calculator as an array index to select a VLAN resource name from the VLAN resource name array and stores the VLAN resource name in the selected VLAN resource buffer;
a wireless station is associated with the VLAN resource identified in the selected VLAN resource buffer.
2. The system of
3. The system of
4. The system of
5. The system of
6. The system of
sets a partial result, R, to an initial value;
loops until each of the one or more portions of the identity parameter have been processed, during which the value calculator:
sets R to R times a multiplier;
sets R to R plus a next portion of the identity parameter;
sets R to R modulo a modulus;
obtaining a result that is equal to R after a last iteration of the loop.
7. The system of
8. The system of
9. The system of
10. The system of
The field relates to communications networks in which subnetworks are employed.
If the number of users of a network is very large, the performance may be degraded by broadcast traffic, such as ARP and DHCP requests. Each device on the network generates a certain amount of broadcast traffic, which every other device must receive and examine to at least some degree, whereby the burden of broadcast processing rises as the square of the number of devices on the network. The degradation due to this effect can become significant even when the network traffic is well within the capacity of the physical transmission medium.
A common solution, described by Mogul and Postel (RFC 950, which is incorporated by reference) is to divide the network into subnets. Subnets can be implemented physically by using separate local-area networks (LANs), or logically by partitioning into virtual LANs (VLANs) as in IEEE 801.1Q, or by a combination of the two techniques. Any particular user's impact is then limited to the specific subnetwork to which the user is assigned. However, in the context of administering a large network, this solution still poses problems, related to the method of assigning users to subnets.
A simple method would be to use the same technique for wireless users as has historically been used for wired users, namely, determining the subnet from the physical location or port through which the user accesses the network. A known disadvantage of this method is that a mobile user who moves across a subnet boundary will lose connectivity at the network layer (Layer 3 of the OSI model). This method may therefore not be optimal for applications that require continuous connectivity while a user moves, e.g. IP telephones. Even if the user is not in motion, location-based subnet assignment may not be optimal if the user is close to a boundary between two wireless coverage areas that use different subnets, because fluctuations in the radio signal could cause the user's equipment to alternate between the coverage areas, losing connectivity each time.
Although location-based subnet assignment can (with the above-noted disadvantages) accomplish one purpose of subnets by reducing the number of users per subnet, it thwarts another important purpose of subnets, namely the separation of traffic by access privilege.
An alternative to location-based subnet assignment is to base the subnet assignment on the user's identity. Identity-based VLAN assignment is implemented in current products from, e.g., Trapeze Networks. The user's VLAN assignment is considered to be an authorization attribute of the user, and so an administrator configures it as part of the user's AAA information in an AAA server, which is typically a Radius server. This administrative effort is justified, and identity-based authorization is especially advantageous, if there is a managerial or security motivation for placing particular users into particular subnets. However, if the number of users is so large as to motivate dividing the network into subnetworks, then the administrative burden of assigning a subnet to each user will also be proportionately large.
RFC 2904 due to Vollbrecht, et al., which is incorporated herein by reference, shows frameworks for authorization in the typical context of AAA (Authentication, Authorization, and Accounting) for a network. This authorization framework is applicable to wireless or wired users. However, in the case of wireless users, the operations described in RFC 2904 must be preceded by other operations specific to establishing a wireless connection. For instance, in 802.11 wireless networks, these preliminary operations include an 802.11 association request from the wireless client device, identifying the client device by hardware (MAC) address. Typically the user's name, password, and/or other AAA parameters are exchanged after the association request has been accepted.
The 802.11 association request also includes a Service Set ID (SSID) that names a wireless service to which the client wishes to connect. If the service equipment supports multiple subnets or VLANs, a common (although not mandatory) implementation choice is to identify an SSID with each VLAN. In that method, the user's request to associate through a given SSID implies that the subsequent authorization processing should connect the user to the VLAN corresponding to that SSID. In that case there is no explicit authorization request from the user, although again, authorization parameters can be obtained from the AAA server as a side effect of authentication.
These and other issues are addressed, resolved, and/or ameliorated using techniques described herein.
The following embodiments and aspects thereof are described and illustrated in conjunction with systems, tools, and methods that are meant to be exemplary and illustrative, not limiting in scope. In various embodiments, one or more of the above-described problems have been reduced or eliminated, while other embodiments are directed to other improvements.
A technique for resource assignment involves obtaining a group of resources, repeatedly selecting a resource from the group of resources until a resource that is available is selected, and associating a client or process with that resource. An example of a method according to the technique includes obtaining a group of VLANs for assignment to a client based on client identity, selecting a first choice from the group of VLANs, selecting a next choice from the group of VLANs if the first choice is unavailable, and connecting the client to the selected VLAN. In this example, the resources are VLANs and the client or process is a client. The client identity may include, by way of example but not limitation, a MAC address, an SSID, or some other known or convenient way to identify the client. A specific example of a method for selecting and assigning resources may include, for example, calculating a hash function based on a client or process identity parameter.
A system constructed according to the technique may include, by way of example but not limitation, memory, a resource group name decoder, a value calculator, an index calculator, and a selector. The memory may include, for example, a resource name buffer, an identity buffer, a result buffer, a resource count buffer, a resource name array, and a selected resource buffer. In operation, the system may employ one or more processors such that an encoded resource name is stored in the resource name buffer; an identity parameter is stored in the identity buffer; the resource group name decoder reads the encoded resource name, decodes the name to obtain decoded list elements, writes a count of the list elements to the resource count buffer, and writes the decoded list elements to the resource name array; the value calculator processes the identity parameter stored in the identity buffer to produce a value that is stored in the result buffer; the index calculator takes the value stored in the result buffer modulo the count of the list elements stored in the resource count buffer; the selector uses the result of the index calculator as an array index to select a resource name from the resource name array and stores the resource name in the selected resource buffer; and a client or process is associated with the resource identified in the selected resource buffer.
The resource name buffer of the system may or may not store a VLAN name. The identity buffer may or may not store a MAC address. The value calculator may or may not process the identity parameter stored in the identity buffer to produce an integer. The value calculator may or may not include a hash calculator.
Embodiments of the present invention are illustrated in the figures. However, the embodiments and figures are illustrative rather than limiting; they provide examples of the invention.
The foregoing examples of the related art and limitations related therewith are intended to be illustrative and not exclusive. Other limitations of the related art will become apparent to those of skill in the art upon a reading of the specification and a study of the drawings.
In the following description, for the purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced without one or more of these specific details or in combination with other components or process steps. In other instances, well-known structures and devices are shown in block diagram form in order to avoid unnecessarily obscuring the present invention.
In the example of
In operation, the controller 102 controls the APs 106 to make the wireless client 108 appear as though it never leaves a VLAN, even if the wireless client 108 roams to an AP that is not in some way connected to that VLAN. The wireless client may be, by way of example but not limitation, a Wi-Fi client. Advantageously, the wireless client 108 can roam across VLANs potentially without interruption. In an embodiment, highly latency sensitive applications such as Voice over Wi-Fi calls seamlessly roam across VLANs.
The controller 102 keeps track of which clients are associated with each AP and shares that information with the APs 106 to enable them to set up tunnels between each other as required to enable VLAN roaming. In the example of
Advantageously, the system 100 can extend an existing network. For example, APs can be deployed where desired without rearchitecting the network (e.g., an existing Ethernet network). This can potentially eliminate complicated VLAN configuration, provide scalability from branch offices to large enterprises, facilitate maintaining investment in existing layer 2/3 switches, upgrade existing WLAN installations, etc.
In the example of
In a non-limiting embodiment, the computer system 202 may be running a program such as, by way of example but not limitation, ethereal, to decode, by way of example but not limitation, IEEE 802.11 standard packets encapsulated in TZSP that are received from the wireless access domain 106. In a non-limiting embodiment, the computer system 102 is connected to a wireless backbone network (not shown), either directly or indirectly through a wireless network.
In a non-limiting embodiment, the network 204 provides a Layer 2 path for Layer 3 traffic, preserving IP addresses, sessions, and other wired Layer 3 attributes as users roam throughout the wireless access domain 106. The network may or may not include a wireless backbone network, or be connected directly or indirectly to a wireless backbone network. Communications between the computer system 202 and the wireless access domain 206 are, therefore, Layer 3 traffic tunneled through Layer 2. Advantageously, by tunneling Layer 3 traffic at Layer 2, users stay connected with the same IP address and keep the same security and Quality of Service (QoS) policies from the wired network while they roam the wireless side. Since Layer 3 attributes are maintained, mobile devices that are connected to the wireless access domain 206 can retain persistent identities.
The seven layers of the Open System Interconnection (OSI) model, of which Layers 2 and 3 are a part, are well-known to those of skill in the relevant art, and are, therefore, not described herein in any substantial detail. It should be noted, however, that Layer 3 is known as the "Network Layer" because it provides switching and routing technologies, creating logical paths, known as virtual circuits, for transmitting data from node to node. Routing and forwarding are functions of this layer, as well as addressing, internetworking, error handling, congestion control and packet sequencing. Layer 2 is known as the "Data Link Layer" because at Layer 2 data packets are encoded and decoded into bits; and Layer 2 furnishes transmission protocol knowledge and management and handles errors in the physical layer, flow control and frame synchronization. The data link layer is divided into two sublayers: The Media Access Control (MAC) layer and the Logical Link Control (LLC) layer. The MAC sublayer controls how a computer on the network gains access to the data and permission to transmit it. The LLC layer controls frame synchronization, flow control, and error checking.
In non-limiting embodiments, the wireless access domain 206 may be referred to as, by way of example but not limitation, a Local Area Network (LAN), virtual LAN (VLAN), and/or wireless LAN (WLAN). The wireless access domain 206 gives each user a persistent identity that can be tracked and managed, no matter where they roam. In an embodiment, the wireless access domain 206 may include one or more radios.
In the example of
In the example of
In an embodiment, the wireless exchange switches 210 swap topology data and client information that details each user's identity, location, authentication state, VLAN membership, permissions, roaming history, bandwidth consumption, and/or other attributes assigned by, by way of example but not limitation, an Authentication, Authorization, and Accounting (AAA) backend (not shown). RFC 2904 "AAA Authorization Framework" by Vollbrecht et al. is incorporated herein by reference. In an embodiment, the wireless exchange switches 210 provide forwarding, queuing, tunneling, and/or some security services for the information the wireless exchange switches 210 receive from their associated APs 214. In another embodiment, the wireless exchange switches 210 coordinate, provide power to, and/or manage the configuration of the associated APs 214. An implementation of a wireless exchange switch, provided by way of example but not limitation, includes a Trapeze Networks Mobility Exchange™ switch. The Trapeze Networks Mobility Exchange™ switches may, in another implementation, be coordinated by means of the Trapeze AP Access (TAPA) protocol.
In an embodiment, the networks 212 are simply wired connections from the wireless exchange switches 210 to the APs 214. The networks 212 may or may not be part of a larger network. In a non-limiting embodiment, the networks 212 provides a Layer 2 path for Layer 3 traffic, preserving IP addresses, sessions, and other wired Layer 3 attributes as users roam throughout the wireless access domain 206. Advantageously, by tunneling Layer 3 traffic at Layer 2, users stay connected with the same IP address and keep the same security and Quality of Service (QoS) policies from the wired network while they roam the wireless side.
In a non-limiting embodiment, the APs 214 are hardware units that act as a communication hub by linking wireless mobile 802.11 stations such as PCs to a wired backbone network. In an embodiment, the APs 214 connect users to other users within the network and, in another embodiment, can serve as the point of interconnection between a WLAN and a fixed wire network. The number of users and size of a network help to determine how many APs are desirable for a given implementation. An implementation of an AP, provided by way of example but not limitation, includes a Trapeze Networks Mobility System™ Mobility Point™ (MP™) AP.
The APs 214 are stations that transmit and receive data (and may therefore be referred to as transceivers) using one or more radio transmitters. For example, an AP may have two associated radios, one which is configured for IEEE 802.11a standard transmissions, and the other which is configured for IEEE 802.11b standard transmissions. In a non-limiting embodiment, an AP transmits and receives information as radio frequency (RF) signals to and from a wireless client over a 10/100BASE-T Ethernet connection. The APs 214 transmit and receive information to and from their associated wireless exchange switches 210. Connection to a second wireless exchange switch provides redundancy.
A station, as used herein, may be referred to as a device with a media access control (MAC) address and a physical layer (PHY) interface to the wireless medium that comply with the IEEE 802.11 standard. As such, in a non-limiting embodiment, the APs 214 are stations. Similarly, the wireless client 216 may be implemented as a station. In alternative embodiments, a station may comply with a different standard than IEEE 802.11, and may have different interfaces to a wireless or other medium.
In operation, a wireless client 216 can roam from one of the access areas 208 to another of the access areas 208. For example, in the example of
The computer 302 interfaces to external systems through the communications interface 310, which may include a modem or network interface. It will be appreciated that the communications interface 310 can be considered to be part of the computer system 300 or a part of the computer 302. The communications interface 310 can be an analog modem, ISDN modem, cable modem, token ring interface, satellite transmission interface (e.g. "direct PC"), or other interfaces for coupling a computer system to other computer systems.
The processor 308 may be, for example, a conventional microprocessor such as an Intel Pentium microprocessor or Motorola power PC microprocessor. The memory 312 is coupled to the processor 308 by a bus 320. The memory 312 can be Dynamic Random Access Memory (DRAM) and can also include Static RAM (SRAM). The bus 320 couples the processor 308 to the memory 312, also to the non-volatile storage 316, to the display controller 314, and to the I/O controller 318.
The I/O devices 304 can include a keyboard, disk drives, printers, a scanner, and other input and output devices, including a mouse or other pointing device. The display controller 314 may control in the conventional manner a display on the display device 306, which can be, for example, a cathode ray tube (CRT) or liquid crystal display (LCD). The display controller 314 and the I/O controller 318 can be implemented with conventional well known technology.
The non-volatile storage 316 is often a magnetic hard disk, an optical disk, or another form of storage for large amounts of data. Some of this data is often written, by a direct memory access process, into memory 312 during execution of software in the computer 302. One of skill in the art will immediately recognize that the terms "machine-readable medium" or "computer-readable medium" includes any type of storage device that is accessible by the processor 208 and also encompasses a carrier wave that encodes a data signal.
The computer system 300 is one example of many possible computer systems which have different architectures. For example, personal computers based on an Intel microprocessor often have multiple buses, one of which can be an I/O bus for the peripherals and one that directly connects the processor 308 and the memory 312 (often referred to as a memory bus). The buses are connected together through bridge components that perform any necessary translation due to differing bus protocols.
Network computers are another type of computer system that can be used in conjunction with the teachings provided herein. Network computers do not usually include a hard disk or other mass storage, and the executable programs are loaded from a network connection into the memory 312 for execution by the processor 308. A Web TV system, which is known in the art, is also considered to be a computer system, but it may lack some of the features shown in
In addition, the computer system 300 is controlled by operating system software which includes a file management system, such as a disk operating system, which is part of the operating system software. One example of operating system software with its associated file management system software is the family of operating systems known as Windows� from Microsoft Corporation of Redmond, Wash., and their associated file management systems. Another example of operating system software with its associated file management system software is the Linux operating system and its associated file management system. The file management system is typically stored in the non-volatile storage 316 and causes the processor 308 to execute the various acts required by the operating system to input and output data and to store data in memory, including storing files on the non-volatile storage 316.
Some portions of the detailed description are presented in terms of algorithms and symbolic representations of operations on data bits within a computer memory. These algorithmic descriptions and representations are the means used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. An algorithm is here, and generally, conceived to be a self-consistent sequence of operations leading to a desired result. The operations are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like.
It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussion, it is appreciated that throughout the description, discussions utilizing terms such as "processing" or "computing" or "calculating" or "determining" or "displaying" or the like, refer to the action and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers or other such information storage, transmission or display devices.
Embodiments of the invention may also relate to apparatus for performing the operations herein. This apparatus may be specially constructed for the required purposes, or it may comprise a general purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a computer program may be stored in a computer readable storage medium, such as, but is not limited to, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
The algorithms and displays presented herein are not inherently related to any particular computer or other apparatus. Various general purpose systems may be used with programs in accordance with the teachings herein, or it may prove convenient to construct more specialized apparatus to perform the required method steps. The required structure for a variety of these systems will appear from the description below. In addition, the present invention is not described with reference to any particular programming language, and various embodiments may thus be implemented using a variety of programming languages.
Enterprise networks that deploy, for example, a Trapeze Mobility System™ might use several Mobility Exchanges™ (MXs™) to deliver WLAN service in areas where mobility is required. In the example of
These MXs communicate with each other and with Trapeze Mobility Points™ (MPs™) to create a Mobility Domain™ and deliver Identity-Based Networking. Identity-Based Networking provides user-specific services based on a user's identity. MXs also control MPs and APs, configuring and managing them whether the MXs directly link to them or use the existing wired infrastructure to connect to them. In the example of
In a specific implementation provided by way of example but not limitation, Trapeze Mobility System Software™ may be used with the system 400 to allow any port on an MX to be configured as either a "network" or "user" port. Network ports connect to the network backbone. User ports permit authenticated network access on a per-user basis. Network ports are roughly analogous to the "trusted" ports of a firewall or access server while the user ports are roughly analogous to a firewall's "untrusted" ports. Network ports determine the VLANs that are locally available to users connected to a particular MX. In this specific implementation, user ports are further categorized by access medium to include users with a wired connection and users who connect through a MP attached to a port.
In operation, the username and password that the user enters to log into the network (including by way of example but not limitation, NT Domain, Active Directory, etc.) is used by the MX to authenticate the user against an AAA back-end. Remote access dial-in user service (RADIUS) is currently a common type of AAA server. In the example of
When users roam, they will associate with an AP that is attached to a different port on a different switch and router subnet. For this reason, in this specific implementation, permissions should follow users on a WLAN network as they roam. When the user authenticates to or roams to an AP, the hosting MX learns which VLAN to put the user on based on their identity and authorizations in the AAA server. If the network port of the MX is directly connected to the user's VLAN, for example through its gigabit port(s), the user is joined to it automatically. If the network ports of the MX are not directly connected to that VLAN, then the user has just roamed across a subnet boundary.
In the example of
It may be noted that the client configuration of Amy and Bob in the example of
By using a single SSID, the client is configured only once and all clients are configured the same way. SSIDs are not a determinant of security credentials or network capabilities—only the AAA process is. It is still possible to join the subnet or VLAN of interest and to restrict roaming capabilities based on physical location. The management task of managing an array of SSIDs on the clients and in the network can be eliminated.
In the example of
Advantageously, no new subnets need to be added to the network to implement the system 500. If you are currently a user of the red subnet, you can remain a user of the red subnet. Any ACLs that you have currently implemented remain effective. If there are firewalls or highly restrictive ACLs between subnets, the only impact to network configuration is to allow the MXs (not clients) to exchange data. The firewalls still remain effective for user data.
Advantageously, the Layer 2 approach combined with tunneling scales extensively. For instance, in the example of
Advantageously, an existing tunnel can be used for any number of users or subnets in any direction. For instance, in the example of
Tunnels are "lightweight" and there aren't very many of them in a Mobility Domain. When needed, they provide a path over which the MX can dynamically instantiate "virtual ports" for the VLANs of interest. Each MX would never have more than (N minus 1) tunnels, where N is the total number of MXs in the Mobility Domain.
For existing routers in an enterprise, an MX-to-MX connection means additional IP unicast traffic is being routed between MXs when users roam away from their native subnet. The existing routers do not participate in any tunneling overhead and they do not need to run any additional protocols such as Mobile IP. In fact, in an embodiment, no additional router configuration is necessary.
The additional routed traffic can be weighed against the cost and difficulty of extending subnets to new areas—the difficulty depends entirely upon the enterprise backbone architecture. To assist in this analysis, the Trapeze Mobility System Software provides extensive information on tunnel usage including traffic statistics, what VLANs are being used and what users are utilizing them.
In the example of
In the example of
In operation, the controllers 704 facilitate forwarding traffic from the user devices 708 to the LANs 712 and vice versa. User devices 708 can be portable devices equipped with, by way of example but not limitation, 802.11 interfaces. For example, user devices 708 can be portable computers or wireless VoIP telephones. The user devices 708 might associate to any of the APs 706 on the respective one of the controllers 704, or to other equivalent APs (not shown). Once having associated to an AP, a user device might roam to another AP, on the same or a different one of the controllers 704. In an embodiment, the controllers 704 include software, firmware, and/or hardware that facilitates assigning the user devices 708 to subnetworks.
The management LAN 710 and the LANs 712 may be implemented as physically separate media or as virtual networks (VLANs) or by a combination; they may be referred to herein as VLANs regardless of the specific implementation.
If at decision point 802, it is determined that the user cannot be authenticated (802-N), then the association fails and the flowchart 800 ends. If, on the other hand, it is determined that the user can be authenticated (802-Y), then the flowchart 800 continues to module 804 where user authorization parameters are obtained.
In the example of
If, on the other hand, it is determined that the user is authorized (806-Y), then the flowchart 800 continues to decision point 808 where it is determined whether a VLAN name specifics a VLAN group. The decision may involve, by way of example but not limitation, detecting the presence of specific characters in the VLAN name attribute.
In the example of
In the example of
In the example of
If it is determined that VLAN status is not OK (818-N), then the flowchart continues to decision point 820 where it is determined whether more VLANs are in the group. In an embodiment, if a VLAN that is part of a group should fail (e.g., Status is not OK), users that would ordinarily have been assigned to that VLAN are allocated evenly and deterministically among the remaining VLANs. Failure of a VLAN may be detected by any of several methods known in the art; for example, absence of carrier at a physical Ethernet port, or inability to contact a server or gateway in the VLAN, or software detection that tunnel creation has failed.
If it is determined that more VLANs are in the group (820-Y), then the flowchart continues to module 822 where VLAN group membership is recalculated excluding the failed VLAN(s), and the flowchart 800 continues from module 812 as described previously. The recalculation may include testing whether there are VLANs remaining in the group (e.g., whether a VLAN count maintained in a numeric buffer is greater than one—see, e.g.,
If, on the other hand, it is determined that no more VLANs are in the group (820-N), then the association fails, and the flowchart 800 ends. The failure may occur, for example, after multiple iterations of the flowchart 800 from module 812 to module 822, at which point it may be assumed that VLAN status is not OK for any of the VLANs in the group.
Eventually, when a VLAN is found with a status that is OK (818-Y), the flowchart 800 continues to module 824 where the user is connected to the VLAN, and the flowchart 800 ends with a successful association.
The description associated with
In the example of
If, on the other hand, it is determined that the user is authorized (906-Y), then the flowchart 900A continues to decision point 908 where it is determined whether a VLAN is specified for the user. In an embodiment, decision point 908 is associated with a test to determine whether the authorization parameters include an identity-based VLAN assignment. If it is determined that a VLAN is specified for the user (908-Y), then the flowchart 900A continues to module 910 where the VLAN is selected and instantiated.
If, on the other hand, it is determined that a VLAN is not specified for the user (908-N), then the flowchart 900A continues to decision point 912 where it is determined whether the SSID thread is done. For example, if it is determined that there is no identity-based VLAN parameter, then the VLAN assignment is instead based on the SSID. If it is determined that the SSID thread is not done (912-N), then the flowchart 900A continues to module 914 where the main thread waits for the SSID thread to end (see
In any case, the flowchart 900A continues to decision point 916 where it is determined whether VLAN status is OK. If it is determined that VLAN status is not OK (916-N), then the association fails, and the flowchart 900A ends. If, on the other hand, it is determined that the VLAN status is OK (916-Y), then the flowchart 900A continues to module 918 where the user is connected to the VLAN, and the flowchart 900A ends. It should be noted that the calculation of a fallback VLAN in case of failure of the first VLAN need not be done in a loop. For example, all the permutations could be calculated in advance and stored in an array. For four VLANs in a group, for example, the array would have 4!=24 entries, each entry being a list of four VLANs showing the order in which the system should attempt to connect to them. In an alternative, a resource other than VLANs could be selected for the purpose of balancing between users or processes. For example, the method could be implemented to select radio devices or channels, instead of VLANs. The benefits would be similar to that provided with respect to VLANs because bandwidth can be allocated among users while minimizing disruption to any one user or process.
In the example of
If, on the other hand, it is determined that a VLAN is not specified for the SSID (920-N), or after the module 922, the flowchart 900B continues to module 924 where the VLAN selection and status are stored. Thus, whether success or failure, the results are stored. For example, if no VLAN (or VLAN group) is specified for the SSID, this is recorded as a failure. Then the SSID thread ends.
The VLAN name buffer 1012 can store, by way of example but not limitation, a conventional VLAN name string, or a name string containing special characters to guide the VLAN group name decoder 1004 in creating a VLAN list. In the example of
In operation, the VLAN group name decoder 1004 reads an encoded name from the VLAN name buffer 1012, and decodes the name to obtain decoded list elements. The group name decoder 1004 writes a count of the VLAN list elements into the VLAN count buffer 1018, and the decoded list elements to the VLAN name array 1020.
The MAC hash calculator 1006 processes the MAC address stored in the MAC address buffer 1014 to produce, by way of example but not limitation, an integer, which is stored in the hash result buffer 1016. An example of operation of a hash calculator, such as the MAC hash calculator 1006, is described later in more detail with reference to
The index calculator 1008 takes the value stored in the hash result buffer 1016 modulo the list length in the VLAN count buffer 1018. In the example of
Because the operations are deterministic functions of the user's identity and hardware MAC address, they give the same result regardless of the AP through which the user associates, and the same result even on different controllers running the same software. Therefore, the user maintains the same VLAN assignment while roaming in the wireless network.
In the example of
In the example of
Although specific values for the constants MULTIPLIER and MODULUS are described here, other values could also perform well. For instance, MULTIPLIER could be 65599. The algorithm is not particularly sensitive to the choice of MODULUS, but it may be advantageous to use a MODULUS that is at least several times the number of VLANs in a group.
Table 1 is intended to illustrate values at each loop pass for the loop index j, the input MAC byte MAC[j], and the partial results at modules 1106 to 1110, for the same example MAC address shown, for illustrative purposes only, in
In practice, the MAC hashing and VLAN selection procedure distributes users among VLANs evenly and deterministically. This effect is illustrated in Table 2, which shows results for several consecutive MAC addresses. For illustrative purposes only, there are assumed to be four VLANs in the VLAN group (CampusA, CampusB, CampusC, and CampusD, with array indexes 0, 1, 2, and 3, respectively). It may be noted that the first row corresponds to the MAC address of Table 1, and other rows correspond to MAC addresses calculated using the same procedure. Consecutive addresses are shown for simplicity and may or may not represent a worst-case scenario, perhaps resulting from a single large purchase of network devices from a single vendor. Those skilled in the relevant art will appreciate that a more random distribution of MAC addresses would be more realistic, but that a more random distribution will merely reinforce a tendency to map different users to different VLANs.
In Table 2, the VLAN (2nd choice) column includes the list of VLANs minus the first choice, which presumably was unavailable. Since one VLAN is removed from the list of available VLANs, the Hash Result colunm associated with the VLAN (2nd choice) is modulo 3 (i.e., the number of remaining available VLANs). In practice, the balance of users among VLANs is maintained even when a VLAN (any of the VLANs) fails.
The first MAC address in Table 2, 00:0b:0e:01:02:01, hashes to 25533 and division mod 4 gives 1, so that initially the VLAN at array index 1 (CampusB) is chosen. On the second pass the same value 25533 is divided modulo 3 giving 0, so the VLAN at array index 0 (CampusA) is chosen. The fifth MAC address in the table, 00:0b:0e:01:02:05, hashes to 25537. On the first pass CampusB is selected. On the second pass, 25537 modulo 3 gives 1. However, since CampusB has been removed from the list and the remaining entries have been shifted to close the gap, array index 1 now contains CampusC. The last MAC address in the table, 00:0b:0e:01:02:09, hashes to 25541, which also results in choosing CampusB on the first pass. On the second pass, 25541 modulo 3 gives 2. Array index 2 was formerly CampusC but, because of compaction of the array after removing CampusB, array index 2 on the second pass contains CampusD. Thus the three users that would ordinarily have been assigned to CampusB are now assigned to CampusA, CampusC and CampusD respectively.
Terms and examples described above serve illustrative purposes only and are not intended to be limiting. As used herein, the term "embodiment" means an embodiment that serves to illustrate by way of example but not limitation.
It may be noted that the term VLAN maybe used interchangeably with the term subnet. The term VLAN (or subnet) refers to an identified domain that is associated with a user. In some implementations, VLANs are identified system wide using a name string or number. These VLAN names are typically independent of 802.1Q tag values, when used. It should be noted that in an embodiment where VLANs are specified as numbers, a numeric range can be used in place of an encoded list of names.
Authentication methods are well known in the art and can be, for example, 802.1X using PEAP and MS-CHAP. However, any known or convenient method or protocol may be used.
Techniques described herein can be used not only in wireless networks, but also in wired networks, and in networks with both wireless and wired users. For wired users, operations described as based on SSID can be made to depend instead on the physical or logal port, tag, or other identifier showing how the user accessed the network.
Techniques described herein can be used with Ethernet protocols, or other protocols could be used. When other protocols are used, a device serial number, phone number, or other numeric or string value could be used in place of, for example, a MAC address.
It will be appreciated to those skilled in the art that the preceding examples and embodiments are exemplary and not limiting to the scope of the present invention. It is intended that all permutations, enhancements, equivalents, and improvements thereto that are apparent to those skilled in the art upon a reading of the specification and a study of the drawings are included within the true spirit and scope of the present invention. It is therefore intended that the following appended claims include all such modifications, permutations and equivalents as fall within the true spirit and scope of the present invention.
Patent Citations
Non-Patent Citations
Referenced by
Legal Events
Original Image


text:
Metallic Damask Tights
Style # 199768
With sheer Damask print and shimmering metallic coats, these bebe tights are sure to lend your look a darkly glamorous pop.
- 100% nylon
- Imported
Rated 5 out of 5�by 2 reviewers.
Rated 5 out of 5�by Kit10 Mardi Gras miracle tights These tights are great quality! I walked in them all day then danced in them all night and didn't get any runs or thin patches. They do tend to slide down a bit and the elastic waist does nothing to keep them up high enough or for the figure. Though I'm only 5'7" and about 125, I felt they were a little small, and that that's why they slid down. I think the M/L size would have fit better, so I recommend going up a size when in doubt. Had they fit perfectly, I would have zero complaints! February 10, 2013
Rated 5 out of 5�by Lola267 Great way to add drama to LBD's I bought these tights because I got tired of wearing solid/lace tights with my LBDs in the winter. I debated between these and the regular damask ones, but I'm glad I got these; the metallic sheen adds the perfect amount of contrast if you wear a plain LBD and black shoes. The metallic print is perfect for the holiday season. Comfortable and warm (or, as warm as you can get when it's 20 degrees out)! December 27, 2012
1-2 of 2

subset: commoncrawl


text:
|Page: 1 of 1
|Sort By:
The Best Western Plus Madisonville Inn is proud of our hometown hospitality!
The Hampton Inn & Suites hotel in Madisonville, KY is located in Madisonville; the hotel is 10 miles from Morrisville-Stowe State Airport and 60 miles
This Days Inn is located approximately five miles from Hopkins County Museum and 55 miles from Evansville Regional Airport.
The Comfort Inn and Suites hotel provides easy access to a number of attractions in Madisonville and the neighboring city of Hanson.
Find great deals on quality hotels & resorts in Madisonville Kentucky, or indulge at one of our luxury resorts. Take advantage of the many amenities that can be included with your stay such as in-room internet access, wifi, room service, fitness center, pool, hot tub, steam room, and shuttle services to and from the airport. Browse our hotels and resorts in Madisonville Kentucky and plan your Madisonville Kentucky vacation today!


text:
Northern Delight
(2 reviews, average rating: 5.0/5)
- Cuisines: Deli
- (709) 623-2220
- Gunner Cove St. Lunaire-Griquet, NL A0K 2X0
- Price range
- $$ ($11-$25)
Claim this restaurant now!
- Excellent food!!Service was great nice to see...
- Reviewed by northern delight
Overall5.0 stars
5.0 stars
5.0 stars
4.0 stars
- Food
- Price Range (per person): $11-$25
- Visit Again?: Yes
- Party Size: 9 or more
Excellent food!!Service was great nice to see people I know.I was there in 2005.It was all around great just to think that before it was northern delight it was Deckers back in 1987 my class had our grad party there.Now one off my classmates owns the place.Great Job Todd.I can't wait until this summer to come have some good fish and chips because in Calgary you can't get any as good as yours.I also can't wait to go to newfie night now that's the real treat if your in for some Newfie Tradition then go Thursday night to see the Mummers trust me you won't be dissappointed but don't be scared just join in.THey will make you feel right at home.See you there.
Sheila Murphy (Blake) Calgary Alta.
- Order: Fish and chips
- Great value for your money, excellent food
- Reviewed by Bill
Overall5.0 stars
5.0 stars
5.0 stars
5.0 stars
- Food
- Price Range (per person): $11-$25
- Visit Again?: Yes
- Party Size: 5
As a business traveler, I've come to appreciate the perk of sampling similar foods prepared by many different restaurants. When we researched travel in NL, it was clear that fish 'n' chips would be prominent. But, the question is, is it good? I've had fish 'n' chips in England where it is eaten most commonly. The fish 'n' chips at Northern Delight, is head and shoulder above in quality above anything I have ever had! It was so good, my family and I had gone back to this restaurant a number of times during our travel. Given another opportunity, I would go back to Northern Delight. My wife loved their pies. There wasn't anything that I found to be less than excellent.
- Order: Fish and Chips


text:
Sweatshirt Jacket Part Two
Sweatshirt Jacket
Palm Coast Shop
Wednesday May 9th & Part 2 Wednesday May 16th
10 to 4 p.m
Teacher: Mabel Holiman
Cost: $40.00 plus supplies
The perfect jacket for Florida - cool weather in the winter and air conditioning in the summer...........
Before Class - buy a sweatshirt with set-in sleeves . Buy it a size larger and wash and dry. Cut it apart like pattern tells.
Batik fabric works great with this pattern and if you have your strips cut out before class you will be well on your way.


text:
Add this chart to your site:
Copy and paste this HTML:
Add this chart to your site:
Copy and paste this HTML:
A web designer and developer is responsible for the creation, maintenance, and development of a company's website. Web designers and developers work within creative teams to provide high-quality, accessible, original ideas about their company's website and its associated features.Read More...
Web designers' hours and expectations can vary, but they typically work more hours when getting ready to present a project to developers or when preparing for a launch. Some travel may be required depending on the size and resources of the company; for example, some web designers may meet with clients to get a sense of their vision and provide realistic feedback, while others may be responsible for presenting new ideas to upper-level management or the board of directors.
Most web designers and developers need at least three years of experience in web design. Companies sometimes prefer a bachelor's degree in marketing or business, but it is not typically required. Companies looking for web designers are usually more concerned with the designer's previous work and/or portfolio of projects. Proficiency in multiple design programs is expected, as is an excellent understand of HTML and other coding. Web designers and developers must be up to date on developments and new software in their field. They must be able to juggle multiple projects at once and also be able to work well with a design team. Web designers may be at the head of the team or may be supervised by a senior designer.
Add this chart to your site: 640px 300px
As Web Designer & Developers transition into upper-level roles such as Senior Software Engineer, they may see a strong upturn in salary. Senior Software Engineers earn $93K on average per year. Career advancement for the typical Web Designer & Developer often leads to becoming a Senior Web Developer or a Senior Web Designer; median salaries in these positions are $31K higher and $17K higher, respectively.
Web Designer & Developers seem to require a rather large skill set. Most notably, skills in jQuery, User Interface Design, Adobe Photoshop, and Cascading Style Sheets are correlated to pay that is above average, with boosts between 7 percent and 11 percent. At the other end of the pay range are skills like Windows Operating System General Use, e-Commerce, and PHP. Most people who know HTML also know Cascading Style Sheets (CSS) and Adobe Photoshop.
Median of all compensation (including tips, bonus, and overtime) by years of experience.
Experience does not seem to be a strong driver of pay increase in this role. Respondents with less than five years' experience take home $42K on average. In contrast, those who have been around for five to 10 years earn a noticeably higher average of $52K. The average pay reported by folks with 10 to 20 years of experience is around $61K. Web Designer & Developers with more than 20 years of experience report incomes that are only modestly higher; the median for these old hands hovers around $62K.
San Francisco offers some of the highest pay in the country for Web Designer & Developers, 44 percent above the national average. Web Designer & Developers can also look forward to large paychecks in cities like Washington (+32 percent), Seattle (+29 percent), Los Angeles (+27 percent), and New York (+26 percent). The lowest-paying market is Indianapolis, which sits 10 percent below the national average.
|Highly satisfied
Rated 4 out of 5
based on 458 votes.
32 %
68 %
|Medical: 69%
|Dental: 55%
|Vision: 42%
|None: 30%


text:
Below is the poem entitled The Owls which was written by poet
Higginbotham. Please feel free to comment on this poem. However, please remember, PoetrySoup is a place of encouragement and growth.
Read Poems by
Michael Higginbotham
for my Mother
After the failed attempt to kill herself,
She gaveled up a parliament of owls,
Repurposing every cabinet and shelf
To house her blinkless treasury of fowls.
What comfort came from a gross of hooded eyes
Strewn through her home, I could not even guess.
Yet urgently she unboxed every prize
And for it found some suitable recess.
As executor, I audited the owls.
Seventy-two, my final reckoning.
There was one I liked. He'd pivot in his cowl
Like a startled monk, when shook. His shuttering
eyes, like cameras, seemed to document the night.
Her night, I thought: her burden, and her flight.


text:
We offer Free Shipping for most orders over $40 in the Continental U.S. Orders under $40 have a $2.99 shipping fee.
We are currently offering FREE 2nd Day Air Shipping on all Emerson Ceiling Fans
We are currently offering FREE 2nd Day Air Shipping on all Monte Carlo Ceiling Fans
We are currently offering FREE 2nd Day Air Shipping on all Feiss Lighting
Most orders can be expedited at an additional charge. Call 1-(800) 724-5501 or email firstname.lastname@example.com for an international shipping quote. View full shipping details page
Hide Details
(based on 1 review)
Ratings Distribution
5 Stars
4 Stars
3 Stars
2 Stars
1 Stars
Reviewed by 1 customer
Displaying review 1
Back to top
perfect for my room
By rhino girl
from Tampa, FL
About Me Casual Do-It-Yourselfer
Best Uses
Comments about Fanimation BP230BL1, Aire Decor Black 52" Outdoor Ceiling Fan:
Love this fan. Low profile for my 8 foot ceilings and I combined it with the Fanimation drum light fixture. Looks perfect together and was exactly what I wanted for my redecorated room.
Bottom Line Yes, I would recommend this to a friend
Was this review helpful? Yes / No
- You may also flag this review
Expert Review
Reviewed by Del Mar
1821 Holsenback DriveDaytona Beach, FL 32117
Sales: firstname.lastname@example.com
Support: email@example.com
Call Us: 1-(800) 724-5501
Monday to Friday: 8am - 8pm EST
Saturday: 10am - 4pm EST
Join over 5,000 people that save moneyat Del Mar Fans & Lighting.
We respect your privacy


text:
haiti earthquake
"Haiti-Like" Disaster in the Heartland?January 27, 2010 - 12:16 PM | by: Brooks Blanton
Bridges collapse, roadways crack and buildings crumble. The ground violently shakes as homes, offices, schools – even hospitals and police stations — are reduced to a pile of cinder blocks, bricks and splintered wood. Thousands are dead, tens of thousands are injured. Daily life comes to a screeching halt as desperate relatives and rescue crews dig through concrete and steel trying to save those who survived, but are buried alive.
It's a scene many of us watched unfold in Haiti just two weeks ago and in China in 2008. But this feared earthquake is expected to hit closer to home, inside our own borders. Scientists are predicting a major shaker, 7.0 or greater on the Richter scale, to strike in the United States within the next 50 years. Hardest hit — not Los Angeles or San Francisco as you would expect — but St. Louis, Little Rock and Memphis. Heartland cities along or near the Mississippi River.
The New Madrid Fault
Geologists and emergency management officials have been watching the New Madrid Fault, a crack in the earth's crust that zig-zags along the Mississippi River from Southern Illinois to Northern Mississippi. It's been relatively quiet until recently. But a series of minor earthquakes, measuring up to 3.4, have been felt recently in small towns across seven states. Just last week, residents of tiny Lynn, Arkansas were jolted out of bed in the middle of the night as a 3.3 quake shook windows, shattered knick-knacks and rattled nerves. Monster earthquakes, believed to register hgher than 7.0, hit this area back in 1811 and 1812. The force of those twin quakes rattled towns up to a thousand miles away. Furniture moved in Washington, DC, chimneys collapsed in Maine and church bells rang in Boston.
Poverty and Disaster
Particularly concerning here is the number of people that live at or below the poverty line. Some communities along the Mississippi River have 26% of their residents living in sub-standard housing and unable to fend for themselves should disaster strike. Emergency Management Officials have estimated that a 7.0 earthquake would destroy more than 227,000 buildings, kill almost 3400 people and seriously injure more than 63,000 others in seven states from Indiana to Mississippi. Images of poorly built buildings and homes leveled in Haiti along with a population not financially equipped with the basics to survive this kind of tragedy, have raised concerns of a similar tragedy and rescue effort happening here.
Preparing for the Worst
The second week of February is Earthquake Awareness Week in the New Madrid Strike Zone. Since 2006, authorities have been working on the New Madrid Seizmic Zone Catastrophic Planning Project — a multi-state, multi-agency effort to improve how emergency crews will rebuild and recover after a major earthquake, much of it based on the response following Hurricane Katrina in 2005. State emergency management officials from seven states are hoping that the nearly 41 million residents who live in the New Madrid strike zone are taking the recent outbreak smaller quakes as a warning for the big one they expect to happen sooner than later.
New Madrid Earthquake Resources
For more information on the New Madrid Fault and the Center for Earthquake Information and Research. You can also learn more about Earthquake Preparedness in the New Madrid Strike Zone through the Tennessee Emergency Management Agency or the Central US Earthquake Consortium.


text:
Frequently Asked Questions
What kinds of food will I eat while on your program?
Do I have to count calories?
Do you offer specialized menus or menus for specific dietary needs/lifestyles?
I have medical issues/conditions; can I still do this program?
Do you offer weight loss plans for men?
I work/travel a lot. Will this program work for me?
Can I eat out and still lose weight on your program?
Do I have to exercise?
How will I keep my weight off once I reach my goal? Do you offer a maintenance program once I reach my goal?
I don't have a center close to me. Can I still participate in the MRC program?
How quickly will I lose my weight?
Are pills required on your program?
How long does the initial consultation last?
Is there any cost for my consultation?
What will we discuss in my weight loss consultation?
How much does your weight loss programs cost?
Do you accept insurance?
After I enroll what kind of support will I receive?
What kinds of food will I eat while on your program?
Our weight loss programs include delicious, real foods that you can buy in a grocery store or eat in your favorite restaurants. Your menu will include lean proteins, fresh fruits and vegetables, starches, dairy and healthy fats. We eat real, whole food...no cardboard box foods with MRC. Check out our recipes here.
Do I have to count calories?
Absolutely not. We are positive that this will be the easiest and simplest approach to weight loss you can find. We have done the work for you so that all you have to do is enjoy delicious, satisfying meals and lose weight.
Do you offer specialized menus or menus for specific dietary needs/lifestyles?
Yes, we offer menus that will work for almost everyone, including individuals with certain medical restrictions and food allergies to road warriors and picky eaters. We offer plans for vegetarians, nursing moms, those eating gluten-free, and even those with medical and dietary needs.
I have medical issues/conditions; can I still do this program?
Yes. In your free consultation we will review your medical history and this will guide us to finding the best program for you. We offer a wide variety of menus, giving us the ability to help almost everyone lose weight and gain wellness. On our Menus Made Easy program MRC's Registered Dietitian can design a menu just for you. She will review your full medical and dietary history and can tailor a menu specifically to you. Click here to learn more.
Do you offer weight loss plans for men?
Yes, we offer plans for men and women. Our plans are tailored to your personal needs, lifestyle, and your goals. We understand men lose weight differently than women, in fact we all lose weight uniquely, which is exactly why we offer a personalized approach to weight loss
I work/travel a lot. Will this program work for me?
Many of our clients have very hectic lives. Our clients who work long hours or travel extensively have been very successful. Our programs and menus are created for the busiest of lifestyles.
Can I eat out and still lose weight on your program?
Yes! In fact we will provide you with tips and tricks to help you enjoy a meal out with friends, all while losing weight. Our menus use real food, making it easy to eat out and travel while still losing weight.
Do I have to exercise?
That is up to you. We encourage exercise to help burn calories and manage stress, but our program does not require exercise.
How will I keep my weight off once I reach my goal?
Do you offer a maintenance program once I reach my goal?
You'll be learning strategies for healthy weight management from Day 1 of your program. Our maintenance program is there to support you at goal. We believe in life skills for long term weight management which is why we include 1 year of support after you've reached your goal weight.
I don't have a center close to me. Can I still participate in the MRC program?
Absolutely! Our MRC at Home program provides the same experienced weight loss specialist ready to address your needs and work with you from a distance. They will set up a schedule for checking in so that you have the same opportunity to lose your weight quickly, get the information you need for long-term success, and the motivation to stay on track while tackling life's challenges.
How quickly will I lose my weight?
We are committed to helping you lose weight. Individual results will vary from person to person. Factors such as food intake, metabolism, level of physical activity, as well as genetics play a role in your rate of weight loss. We are all unique and different, no individual results should be seen as typical.
Are pills required on your program?
Each center offers a variety of natural herbs and vitamins that will enhance your program's success. We know that our clients are successful when cravings are controlled, energy is increased, and results happen quickly – making your resolve stronger as you work through the changes that create weight loss. There are many benefits to the supplements that MRC offers, from enhancing weight loss to promoting optimal health. Once we learn more about your needs, we will be able to discuss what will work best in combination with your individualized program. Our specially trained team will work with you to determine the supplementation that fits your specific needs, to maximize your weight loss and continued good health.
How long does the initial consultation last?
Your consultation will take about 45 minutes to an hour, depending on your needs. Click here for your no obligation, free consultation.
Is there any cost for my consultation?
No, the consultation is complimentary.
What will we discuss in my weight loss consultation?
We know that, when the program fits your life, you will be successful. We''ll discuss your weight loss goals, eating habits, medical profile, and lifestyle. This information allows us to recommend program that is tailored to you.
How much does your weight loss programs cost?
Prices will vary depending on your personalized menu and the level of support you need. The average cost for our standard 17 week program is as little as $7.00* per day. All our programs include; easy to follow customized weight loss menus, private one on one support, unlimited weigh-ins and more. Many of our clients report spending far less on food after beginning our program. Because you are preparing most of the food yourself (and eating less of it), you are likely to realize significant savings compared to other diets that use their own pre-packaged meals.
*With the purchase of a 17 week program. Price includes the cost of the program and required minimum of 2 protein shakes per day. Clients may choose to purchase other products such as high-nutritional supplements, nutraceuticals and meal replacement shakes to accelerate weight loss and further control cravings. Please visit your local MRC center for specific program pricing, products and services.
Do you accept insurance?
We have found that most major medical insurance companies will reimburse you for medical necessity. We do not accept, nor do we bill insurance.
After I enroll what kind of support will I receive?
You will visit your weight loss center regularly and receive constant support. Your weight loss consultant will work with you one on one, ensuring you have all the support you need. Your team will help you with meal planning, recipe ideas, problem solving, and anything else you need to succeed. When you partner with MRC you gain a weight loss coach, accountability partner, and cheerleader.
Thanks for reading! Have more questions? No problem, contact us and we will be happy to help.
Ready to get started? Perfect! Schedule your free weight loss consultation here and we'll be in touch right away.


text:
The Monkey Wrench Gang
First edition cover
|Edward Abbey
|United States
|Anarchist, novel
|Lippincott Williams & Wilkins
Publication date
|August 1, 1975
|Media type
|Print (hardback & paperback)
|352 pp (hardback edition)
|ISBN 0-397-01084-2 (hardback edition)
|LC Class
|PZ4.A124 Mo PS3551.B2
|Followed by
|Hayduke Lives
The Monkey Wrench Gang is a novel written by American author Edward Abbey (1927–1989), published in 1975.
Easily Abbey's most famous fiction work, the novel concerns the use of sabotage to protest environmentally damaging activities in the Southwestern United States, and was so influential that the term "monkeywrench" has come to mean, besides sabotage and damage to machines, any sabotage, activism, law-making, or law-breaking to preserve wilderness, wild spaces and ecosystems.
In 1985, Dream Garden Press released a special 10th Anniversary edition of the book featuring illustrations by R. Crumb, plus a chapter titled "Seldom Seen at Home" that had been deleted from the original edition.[1] Crumb's illustrations were used for a limited-edition calendar based on the book.[2] The most recent edition was released in 2006 by Harper Perennial Modern Classics.
Plot summary[edit]
The book's four main characters are ecologically-minded misfits — "Seldom Seen" Smith, a Jack Mormon river guide; Doc Sarvis, an odd but wealthy and wise surgeon; Bonnie Abbzug, his young sexualized female assistant; and a rather eccentric Green Beret Vietnam veteran, George Hayduke. Together, although not always working as a tightly-knit team, they form the titular group dedicated to the destruction of what they see as the system that pollutes and destroys their environment, the American West. As their attacks on deserted bulldozers and trains continue, the law closes in.
The book was praised for its erudition, flair, down-home wit, and the accuracy of its descriptions of life away from civilization. Abbey made the West his home and was a skilled outdoorsman.
From a 21st-century viewpoint, the Gang in some ways bears little resemblance to the modern media's portrayal of environmentalists — the book's characters eat a lot of red meat, own firearms, litter the roadside with empty beer cans and drive big cars. (Abbey's habits were reportedly similar.) Abbey's politics are not "bleeding heart", and most of the characters dismiss liberalism: They attack American Indians as well as whites for their consumerism, and hold little regard for the Sierra Club. (Despite occasional contradictory evidence, Edward Abbey considered himself a liberal — "I'm a liberal, and proud of it," he wrote in Abbey's Road.)
For the Gang, the enemy is those who would develop the American Southwest — despoiling the land, befouling the air, and destroying nature and the sacred purity of Abbey's desert world. Their greatest hatred is focused on the Glen Canyon Dam, a monolithic edifice of concrete that dams a beautiful, wild river, and which the monkeywrenchers seek to destroy. One of the book's most memorable passages describes Abbey's character Seldom Seen Smith, as he kneels atop the dam praying for a "pre-cision earthquake" to remove the "temporary plug" of the Colorado River.
The book may have been the inspiration for Dave Foreman's and Mike Roselle's creation of Earth First!,[3] a direct action environmental organization that often advocates much of the minor vandalism depicted in the book. Many scenes of vandalism and ecologically-motivated mayhem, including a billboard burning at the beginning of the book and the use of caltrops to elude a group of vigilantes, are presented in sufficient detail as to form a skeletal how-to for would-be saboteurs. The actions are presented in a larger-than-life format, because much of what Hayduke, and the rest of the characters in the story face are larger-than-life obstacles that require larger-than-life approaches. The types of actions are said to have influenced the formation of environmental organizations such as Greenpeace and the Earth Liberation Front.[citation needed]
- From the National Observer, "A sad, hilarious, exuberant, vulgar fairy tale... It'll make you want to go out and blow up a dam."[this quote needs a citation]
- From The New York Times, "Since the publication of The Monkey Wrench Gang, Mr. Abbey has become an underground cult hero."[this quote needs a citation]
- From The Washington Post, "One of the best writers to deal with the American West."[this quote needs a citation]
- From the Houston Chronicle, "What a thing of beauty is Edward Abbey's The Monkey Wrench Gang."[this quote needs a citation]
- Hayduke Lives continues the story from where The Monkey Wrench Gang left off.
Film, TV or theatrical adaptations[edit]
As of 2012, a film adaptation of the book, to be directed by Henry Joost and Ariel Schulman, was being planned.[4] The film rights holders for the book filed suit against the producers of Night Moves, charging that the film's plot is significantly similar to the story of book. [5][6]
References in other media[edit]
In his book Screw Unto Others, George Hayduke states that Edward Abbey was his mentor, and mentions The Monkey Wrench Gang as the origin of the term monkeywrenching. Hayduke says The Monkey Wrench Gang inspired environmentalist David Foreman to help create Earth First!.[7]
See also[edit]
- ^ AbbeyWeb: The Monkey Wrench Gang
- ^ AbbeyWeb: The 1987 Monkey Wrench Gang Calendar
- ^ Lindholdt, Paul (2015). Explorations in Ecocriticism: Advocacy, Bioregionalism, and Visual Design Ecocritical Theory and Practice. Lexington Books. p. 93. ISBN 9780739194997.
- ^ "The Monkey Wrench Gang (2013)". The Monkey Wrench Gang (2013). IMDB.com. Retrieved 2011-08-01.
- ^ Gardner, Eriq (September 14, 2012). "Producer Launches Legal War Over New Eco-Terrorist Film Starring Jesse Eisenberg". The Hollywood Reporter. Retrieved July 26, 2013.
- ^ Patten, Dominic (September 15, 2012). "Night Moves Director, Producers, UTA Sued By Edward Pressman & Edward Abbey Widow For Copyright Infringement". Deadline.com. Retrieved July 26, 2013.
- ^ Screw Unto Others, p. 77
Further reading[edit]
- Cassuto, David N. "Waging Water: Hydrology vs. Mythology in The Monkey Wrench Gang." ISLE: Interdisciplinary Studies in Literature and the Environment 2.1 (1994): 13–36.
- Slovic, Scott. "Aestheticism and Awareness: The Psychology of Edward Abbey's The Monkey Wrench Gang." CEA Critic 55.3 (1993): 54–68.
External links[edit]
- The Monkey Wrench Gang at the Internet Movie Database
- The environmentalist as macho, working class, cowboy: Edward Abbey's The Monkey Wrench Gang
- "Rereading: Robert Macfarlane on The Monkey Wrench Gang
- "As reviewed by Darren Botello-Samson, Department of Social Sciences, Pittsburg State University


text:
"Because that's what men do."
In Thursday's "Days Of Our Lives" video, Ben attacks Rafe in the Salem streets, Paige has questions, Jenn feels relieved, Eric has a choice to make and Sami has second thoughts.
Get her take on the Kami relationship by reading the Soaps.com Interview: Days Of Our Lives' Lauren Koslow. And then get a preview of the upcoming season of Reign.
Follow Soaps.com on Twitter, and Soaps.com on Facebook.
Header Photo Credit: NBC Universal
- Matt Purvis


text:
Hi, all
Okay, have we done fried chicken, deviled eggs, and BBQ for a while?
I'm doing Chinese tonight, pot stickers and a healthy cole slaw (again with the picnic food?) with oriental dressing.
Have a wonderful day as we head into Summer.
Nan D Arnold
oh, if you like, check out my new release Pesto Packin' Mama, see http://www.nandarnold.com


text:
The mission of the Business Council is to serve students by representing the student voice, promoting student involvement, facilitating professional opportunities, encouraging academic excellence, and developing student leaders.
Create a culture where Huntsman students own their education and career.
The Business Council operates on the following values in order to achieve its mission and vision:
Business Council meets every Tuesday at 5 p.m. on the 9th floor of the business building. This meeting is open for all students to come listen to and participate in discussions with the Business Council.


text:
|Rothschild Schwartz Architects - Final(ly) House in Sausalito, California
|Monday, 06 April 2009 02:38
The house is located within great surroundings, on Wolfback Ridge Road, in Sausalito, California. The south-facing ridge top site abuts the GGNRA, and is a gently sloping swale with panoramic views from east to west including the East Bay hills, the city of San Francisco, Golden Gate Bridge, Marin Headlands, and the Pacific Ocean. The site flows into the natural habitat of the Headlands, and affords maximum solar exposure, bracing maritime breezes and cloaking fogs.
Related Articles:
|Last Updated on Monday, 06 April 2009 04:42


text:
With the fast paced life many of us have, a lot of people are always looking for easy ways to lose weight fast. With the many activities we do day by day, it is quite difficult for some of us to find time to enroll in a weight loss program and really stick to it.
There are a lot of easy ways to lose weight fast and one of them is to follow an exercise program that will truly work. It is true that doing cardio exercises will help you lose weight but this will take more time. If you want to lose weight fast, you must do interval trainings. Here, you will do more intense strength workouts and cardio exercises at short time intervals. This is definitely one of the easy ways to lose weight fast as you do not really have to be spending much of your time in the gym.
One of the easy ways to lose weight fast is to follow a diet program that works. One that will help you improve your metabolism and not slow it down. There are a lot of diet programs out there that will just help you suppress your appetite but sometimes, this just does not work. The easy ways to lose weight fast include eating the right kind of foods such as foods rich in fiber that helps in increasing metabolism. You should also do away with processed food and stick to all natural ones. You should also know what should your carbohydrate source be. Lowering your carb intake is not necessarily the answer but knowing what food to eat in order to still get the carbs you need is what really works.
If you want to learn more about the easy ways to lose weight fast, you can go to this site now


text:
Olesko Castle
Name: Olesko
Country: Ukraine
this castle
Now about Olesko. The castle stands on the top of 50m hill. The plan of
castle is oval. One can see the wall and a moat under it. There is a swamp
around the castle's hill. In the inner yard one can see a well 42 m deep
The first mention of it one can find in the document of 1327
when the
pope Bonifacio lX gave Halych Catholic bishop this castle as a gift.
laid on the border of Volyn and Lviv land and often changed its hosts. It was
the fief of Polish, Lithuanian and Hungarian magnats and kings.In 1431 the
castle became the centre of fighting for re-union with Volyn. The castle was
many times destroyed by Tartars In the second part of the 15th c the castle
lost its defendant meaning and became the fief ofRadzivill family. In 1605
the castle and a town again change the host-this area was bought by magnate
Ivan Danylovych, then-by Princes Sobiesky and Rzewusky( the same host that in
Pidgirtsy castle ) Their carefree style of living made nothing good for the
castle-it was sold to pay magnates' debt and the collection of antiques moved
to Pidgirtsy castle. In 16th-17th cc. the castle was rebuilt, its halls were
decorated with paintings and mosaics ( the carving was made by French
sculptor B. Leblan).
After the earthquake in 1838 the castle was partly destroyed. In
1882 the
castle's host was Halycia architectural society which closed it for long
years In 1892 a restoration was made .Two wars destroyed the castle very
much And-if all these disasters were not enough- the lightning struck in it
in 1956.The restoration was held in 1961-1985. There is a museum there
now.The rich collection of ancient furniture and paintings is on
display. .Other places of interest near the castle is the town's cementary
with nice ancient monuments made by Shimzer and Gothic church( 15th c.
The above information and pictures were provided by Sergey
Have you visited a castle?
Do you know something about a castle?
If so, write something about it here.
Review this castle
Discount Tours
Discount Cruises
Discount River Cruises
Globus Tours
Trafalgar Tours
Disney Vacations
Quinceaneras at Sea
Tauck Tours
CIE Tours
Cosmos Tours
Affordable Travel
Affordable Vacations
Celebrity Cruises
Holland America Cruises
Norwegian Cruises
Oceania Cruises
Princess Cruises
Royal Caribbean Cruises
Azamara Cruises
Crystal Cruises
Cunard Cruises
Disney Cruises
MSC Cruises
Regent Cruises
Seabourn Cruises
Silversea Cruises
Windstar Cruises
Avalon Waterways Cruises
Uniworld Cruises
Viking Cruises
Tauck Cruises


text:
SHREWSBURY, Mass. - Shrewsbury police have released their incident report for Dec. 6 to Dec. 10. Incidents reported include:
• On Dec. 7 at 11:26 a.m., Corey R. Collins, 25, of 15 Walnut Hill Lane, was arrested at his home and charged with assault and battery of an elderly/disabled person. Collins was charged after a man reported to police that he was assaulted by his friend's son.
• On Dec. 6 at about 8 p.m., Erik B. Vanvleck, 36, of Worcester was arrested at 197 Boston Turnpike and charged with assault with a dangerous weapon. Vanvleck was charged after police responded to reports at the Worcester City Motel of two males and one female making threats.
• On Dec. 8 at 1:37 a.m., a Shrewsbury woman was arrested at Green Drive on a warrant.
• On Dec. 8 at 11:08 a.m., a Shrewsbury woman at Boston Turnpike was arrested on warrants charging unlicensed operation of a vehicle and not possessing registration.
• On Dec. 8 at about 4 p.m., a Shrewsbury man was arrested on a warrant charging larceny under $250, assault and battery on a police officer, resisting arrest, disorderly conduct and disturbing the police.
• On Dec. 9 at 1:15 a.m., a Brockton man was arrested at the intersection of Worthington Avenue and Boston Turnpike and charged with driving with a suspended license.
• On Dec. 9 at 3:48 a.m., a Shrewsbury man was arrested at Green Drive and charged with disorderly conduct.
Download the complete incident report at the link below.
Attached: Shrewsbury Police Log for Dec. 6-10 (shrewsbury_police_incident_log_12.07.12-12.10.12.pdf)Get Breaking News In Your Inbox


text:
Upload Photo
Cucina di Vargas
At Cucina di Vargas in Hewlett, the dining space is decorated simply, enhancing the ambience with its friendly staff, large portions and surprisingly good prices.
Newsday.com now uses Facebook for our comment boards. Please read our guidelines and connect your Facebook account to comment.
Recent restaurant closures on Long Island 35 great burgers to try on LI 17 must-visit Greenport restaurants Long Island's 10 best steak houses of 2015 LI's 10 best fine dining restaurants of 2015 Restaurants with a water view 23 must-eat lobster rolls on LI Long Island's best pizza: 10 pies worth the drive 44 favorite outdoor dining spots on LI Recent Long Island restaurant openings 50 fine dining restaurants to try ASA Tapas N Sushi


text:
WASHINGTON (AP) - A security researcher says cell phones equipped with Google's Android operating system are at risk of being disabled or wiped clean of their data, including contacts, music, and photos.
Opening a link to a web site or application embedded with malicious code can trigger an attack capable of destroying the memory card in Android-equipped handsets made by Samsung, HTC, Motorola and Sony Ericsson. That from Ravi Borgaonkar of Germany's Technical University Berlin. He wrote that another code that can erase a user's data appears to target only the top selling Galaxy S III and other Samsung phones.
Borgaonkar says he informed Google of the vulnerability in June. A fix was issued quickly, he says, but it wasn't publicized, leaving manyphone owners unaware the problem existed.
Google declined to comment.
To comment, the following rules must be followed:
Comments may be monitored for inappropriate content, but the station is under no legal obligation to do so.
If you believe a comment violates the above rules, please use the Flagging Tool to alert a Moderator.
Flagging does not guarantee removal.
Multiple violations may result in account suspension.
Decisions to suspend or unsuspend accounts are made by Station Moderators.
Questions may be sent to firstname.lastname@example.com. Please provide detailed information.


text:
Axel Waldemar Gallén was born in Pori, Finland, on the 26th April 1865. In 1876 he moved to the capital, Helsinki, where he attended a Swedish-language high school and studied in the evening classes of the Drawing School of the Finnish Fine Arts Association (1878-1881) and at the Central School of Applied Arts (1880-1881). From 1881-1884 he studied at the Drawing School of the Finnish Fine Arts Association, then from 1884-1889 he continued his studies in Paris at the Académie Julian, the Atelier Cormon and other schools.
It was during his period in Paris that Gallé painted "Démasquée" - 'Unmasked' - showing a Parisian model sitting on a Finnish ryijy weave with a "fin-de-siecle expression of playful exhaustion and nervous vividness." The painting has been interpreted as presenting the moment when the masks of propriety have been removed, leaving only naked existence. It also captures the underlying tragic spirit of the bohemian lifestyle.
In 1890, Gallén married Mary Helena Slöör. Their honeymoon trip to Karelia marked the beginning of the orientation known as Karelianism in Finnish culture. Many important symbolistic works were completed in 1894 and, in the following year, he held a joint exhibition with Edvard Munch in Berlin. The years 1901-1903 were spent painting the frescoes of the Jusélius Mausoleum in Pori. This three-year project was followed by a 'period of purification' during which Gallen-Kallela painted a large number of themes from nature. In 1907 he officially changed his name from Gallén to Gallen-Kallela and, in the same year, he was selected as member of the German expressionist group Die Brücke.
Following a solo exhibition in Budapest, Hungary, and a move to Paris, Gallen-Kallela spent the years from 1909-1911 travelling with his family to British East Africa (present-day Kenya), where he discovered bright, light colours and a more expressive language of form. From 1911-1913 he constructed the Tarvaspää studio-residence. In 1918, upon the invitation of General Mannerheim, Protector of State, Gallen-Kallela designed flags, official decorations and military uniforms for the newly independent Finland. Later he continued on his travels, heading to the United States and living in Chicago from 1923-1924, and Tao, New Mexico, in 1926. During this period he studied the art and culture of Native Americans before returning to Tarvaspää.
In 1931, during his return from delivering a lecture in Copenhagen, Gallen-Kallela contracted pneumonia whilst staying in Stockholm. Akseli Gallen-Kallela died in the Hotel Reisen in Stockholm on the 7th March 1931.
Adapted from the Gallen-Kallelan Museo web site.