Independent role based authorization in boundary interface elements
A boundary interface element for communications networks is disclosed. The boundary interface element is adapted for enabling a network administrator for a first network coupled to a first network interface of the boundary interface element to configure a policy for the first network interface independently of the other administrators of the other interfaces, while restricting access to a second network interface of the boundary interface element. Similarly, the boundary interface element enables a network administrator for a second network coupled to the second network interface of the boundary interface element to configure a policy for the second network interface while restricting access to the first network interface. The network administrator for the first network is permitted to view the policy configured for the second network interface, and the network administrator for the second network is permitted to view the policy configured for the first network interface. The boundary interface element may be employed in a variety of network deployment scenarios.
1. An apparatus comprising:
a supervisory module to switch network communications between a first network interface and a second network interface based on a first policy and a second policy; and
an interface administrator to:
enable a first network administrator of a first network in communication with the first network interface to configure the first policy for the first network interface;
enable a second network administrator of a second network in communication with the second network interface to configure the second policy for the second network interface, the second network administrator being different than the first network administrator;
restrict the first network administrator from configuring the second policy;
restrict the second network administrator from configuring the first policy;
enable the first network administrator to view the second policy; and
enable the second network administrator to view the first policy.
2. The apparatus of claim 1 , wherein the first network interface is in communication with a service provider network and the second network interface is in communication with a customer network.
3. The apparatus of claim 1 , wherein the first network interface is in communication with a first customer network and the second network interface is in communication with a second customer network.
4. The apparatus of claim 1 , wherein the first network interface is in communication with a first peer network and the second network interface is in communication with a second peer network.
5. The apparatus of claim 1 , wherein the first network interface is in communication with a first home network and the second network interface is in communication with a second home network, and further comprising a third network interface in communication with a first service provider network and a fourth network interface in communication with a second service provider network.
6. The apparatus of claim 5 , wherein the supervisory module is to load balance network communications associated with the first network interface between the third network interface and the fourth network interface.
7. The apparatus of claim 1 , wherein the first network interface is in communication with a first home network and the second network interface is in communication with a second home network, and the supervisory module is to switch network communications between the first network interface and a third network interface and between the second network interface and the third network interface, third network interface in communication with a first service provider network.
8. The apparatus of claim 7 , wherein a service provided to the third network interface is shared between the first network interface and the second network interface.
9. A method of configuring a network boundary interface, the method comprising:
enabling a first network administrator of a first network in communication with a first network interface of the boundary interface to configure a first policy for the first network interface;
enabling a second network administrator of a second network in communication with a second network interface of the boundary interface to configure a second policy for the second network interface, the second network administrator being different than the first network administrator;
restricting the first network administrator from configuring the second policy;
restricting the second network administrator from configuring the first policy;
enabling the first network administrator to view the second policy; and
enabling the second network administrator to view the first policy.
10. The method of claim 9 , wherein the first network interface is in communication with a service provider network and the second network interface is coupled to a customer network.
11. The method of claim 9 , wherein the first network interface is in communication with a first customer network and the second network interface is in communication with a second customer network.
12. The method of claim 9 , wherein the first network interface is in communication with a first peer network and the second network interface is in communication with a second peer network.
13. A machine-readable storage disc or storage device comprising instructions which, when executed, cause a machine to at least:
enable a first network administrator of a first network in communication with a first network interface of a boundary interface to configure a first policy for the first network interface;
enable a second network administrator of a second network in communication with a second network interface of the boundary interface to configure a second policy for the second network interface, the second network administrator being different than the first network administrator;
restrict the first network administrator from configuring the second policy;
restrict the second network administrator from configuring the first policy;
enable the first network administrator to view the second policy; and
enable the second network administrator to view the first policy.