Method and apparatus to apply aggregate access control list/quality of service features using a redirect cause
    1.
    发明授权
    Method and apparatus to apply aggregate access control list/quality of service features using a redirect cause 有权
    使用重定向原因应用聚合访问控制列表/服务质量特征的方法和装置

    公开(公告)号:US07953885B1

    公开(公告)日:2011-05-31

    申请号:US10418344

    申请日:2003-04-18

    CPC classification number: H04L49/70 H04L49/109 H04L49/25

    Abstract: A method and apparatus to apply aggregate ACL/QoS features using a redirect cause is disclosed. According to one embodiment of the present invention, a control processor configured to support a plurality of virtual interfaces is provided, wherein each of the plurality of virtual interfaces is associated with a quality of service level. According to another embodiment, each quality of service level is associated with a processing bandwidth of the control processor. According to yet another embodiment, a control processor interface is provided coupled to the control processor which is configured to select a virtual interface of the plurality of virtual interfaces using data of a received data unit, and to transfer the received data unit to the selected virtual interface.

    Abstract translation: 公开了使用重定向原因应用聚合ACL / QoS特征的方法和装置。 根据本发明的一个实施例,提供了一种被配置为支持多个虚拟接口的控制处理器,其中多个虚拟接口中的每一个与服务质量水平相关联。 根据另一个实施例,每个服务质量水平与控制处理器的处理带宽相关联。 根据另一个实施例,提供耦合到控制处理器的控制处理器接口,其被配置为使用接收到的数据单元的数据来选择多个虚拟接口中的虚拟接口,并将接收到的数据单元传送到所选择的虚拟 接口。

    Performing lookup operations on associative memory entries
    3.
    发明授权
    Performing lookup operations on associative memory entries 有权
    对关联内存条目执行查找操作

    公开(公告)号:US07237059B2

    公开(公告)日:2007-06-26

    申请号:US11321918

    申请日:2005-12-28

    CPC classification number: G06F17/30982

    Abstract: Methods and apparatus are disclosed for performing lookup operations using associative memories, including, but not limited to modifying search keys within an associative memory based on modification mappings, forcing a no-hit condition in response to a highest-priority matching entry including a force no-hit indication, selecting among various sets or banks of associative memory entries in determining a lookup result, and detecting and propagating error conditions. In one implementation, each block retrieves a modification mapping from a local memory and modifies a received search key based on the mapping and received modification data. In one implementation, each of the associative memory entries includes a field for indicating that a successful match on the entry should or should not force a no-hit result. In one implementation, an indication of which associative memory blocks or sets of entries to use in a particular lookup operation is retrieved from a memory.

    Abstract translation: 公开了用于使用关联存储器执行查找操作的方法和装置,包括但不限于基于修改映射修改关联存储器内的搜索关键字,响应于最高优先级的匹配条目来响应不受限制的条件,包括力 - 指示,在确定查找结果中选择各种组或存储器中的关联存储器条目,以及检测和传播错误条件。 在一个实现中,每个块从本地存储器检索修改映射,并且基于映射和接收到的修改数据修改接收到的搜索密钥。 在一个实现中,每个关联存储器条目包括用于指示条目上的成功匹配应该或不应该强制无命中结果的字段。 在一个实现中,从存储器检索在特定查找操作中使用的哪些关联存储器块或条目集合的指示。

    Methods and apparatus for mapping fields of entries into new values and combining these mapped values into mapped entries for use in lookup operations such as for packet processing
    6.
    发明授权
    Methods and apparatus for mapping fields of entries into new values and combining these mapped values into mapped entries for use in lookup operations such as for packet processing 有权
    将条目的字段映射为新值并将这些映射值组合成映射条目以用于查找操作(例如用于分组处理)的方法和装置

    公开(公告)号:US07313667B1

    公开(公告)日:2007-12-25

    申请号:US10212965

    申请日:2002-08-05

    CPC classification number: H04L49/3009 H04L45/742

    Abstract: Fields of entries are mapped into new values with these mapped values combined into mapped entries for use in lookup operations typically for packet processing. One implementation identifies a list including multiple items each having a first field and a second field. The unique first and second fields of each item are respectively mapped to mapped first and second fields. A first associative memory is programmed with the unique first fields, and a first stage memory is programmed with the mapped first fields at corresponding locations. A second associative memory is programmed with the unique second fields, a second stage memory is programmed with the mapped second fields at corresponding locations. A second stage associative memory is then programmed, using the mapped first and second fields, with entries corresponding to one or more of the original multiple items.

    Abstract translation: 条目的字段被映射到新的值,这些映射的值组合成映射的条目,用于通常用于数据包处理的查找操作。 一个实现标识包括多个项目的列表,每个项目具有第一个字段和第二个字段。 每个项目的唯一的第一和第二个字段分别映射到映射的第一和第二字段。 第一关联存储器用唯一的第一字段编程,并且第一级存储器被编程与对应位置处的映射的第一字段。 第二关联存储器用唯一的第二字段编程,第二级存储器被编程与对应位置处的映射的第二字段。 然后使用映射的第一和第二字段对与第一多个项目中的一个或多个条目相对应的条目来编程第二阶段关联存储器。

    Data forwarding in a layer three satellite network
    7.
    发明授权
    Data forwarding in a layer three satellite network 有权
    数据转发在第三层卫星网络中

    公开(公告)号:US07792124B2

    公开(公告)日:2010-09-07

    申请号:US11695049

    申请日:2007-04-01

    CPC classification number: H04L12/4641 H04L29/12028 H04L61/103

    Abstract: Method and system for providing access layer satellite architecture in a data network including receiving a data packet from an access layer network device, the data packet including a Virtual Local Area Network (VLAN) identifier associated with a port on the access layer network device, performing a route lookup procedure based on the received data packet to determine a destination of the data packet, updating an ARP table with a Media Access Control (MAC) address associated with the VLAN identifier and the port of the received data packet, and transmitting the data packet to a destination network device, is disclosed.

    Abstract translation: 在数据网络中提供接入层卫星架构的方法和系统,包括接收来自接入层网络设备的数据分组,所述数据分组包括与所述接入层网络设备上的端口相关联的虚拟局域网(VLAN)标识符,执行 基于接收到的数据分组来确定数据分组的目的地的路由查找过程,用与VLAN标识符相关联的媒体访问控制(MAC)地址和接收到的数据分组的端口更新ARP表,以及发送数据 分组到目的地网络设备。

    Policy-based processing of packets
    8.
    发明授权
    Policy-based processing of packets 有权
    数据包的基于策略的处理

    公开(公告)号:US07724728B2

    公开(公告)日:2010-05-25

    申请号:US11122612

    申请日:2005-05-05

    CPC classification number: H04L12/4641

    Abstract: Disclosed are, inter alia, methods, apparatus, data structures, computer-readable media, and mechanisms, for policy-based processing of packets, including mechanisms for managing the policies. A user is authenticated and its user group identifier is identified. A packet is received and is associated with the user group identifier, and one or more fields (typically other than the source address field) of the packet are used to identify a second group identifier. A lookup operation is then performed on a policy based on the first and second group identifiers to identify a packet processing action to be performed on the packet. These identifiers are typically not network addresses, which disassociates the policy from physical network addresses (which often are dynamically assigned and may also vary based on the access point into the network of a user), and allows a switching device to process packets based on a policy stated using group identifiers.

    Abstract translation: 公开了用于分组的基于策略的处理的方法,装置,数据结构,计算机可读介质和机制,包括用于管理策略的机制。 用户被认证,并且其用户组标识符被识别。 接收到分组并与用户组标识符相关联,并且使用分组的一个或多个字段(通常不是源地址字段)来标识第二组标识符。 然后基于第一组标识符和第二组标识符对策略执行查找操作,以识别要对分组执行的分组处理动作。 这些标识符通常不是网络地址,其将策略与物理网络地址(其通常被动态地分配,并且还可以基于到用户的网络的接入点)而变化),并且允许交换设备基于 政策声明使用组标识符。

    LAYER THREE SATELLITE FUNCTIONALITY IN A DATA NETWORK
    9.
    发明申请
    LAYER THREE SATELLITE FUNCTIONALITY IN A DATA NETWORK 有权
    数据网络中的三层卫星功能

    公开(公告)号:US20080240100A1

    公开(公告)日:2008-10-02

    申请号:US11695049

    申请日:2007-04-01

    CPC classification number: H04L12/4641 H04L29/12028 H04L61/103

    Abstract: Method and system for providing access layer satellite architecture in a data network including receiving a data packet from an access layer network device, the data packet including a Virtual Local Area Network (VLAN) identifier associated with a port on the access layer network device, performing a route lookup procedure based on the received data packet to determine a destination of the data packet, updating an ARP table with a Media Access Control (MAC) address associated with the VLAN identifier and the port of the received data packet, and transmitting the data packet to a destination network device, is disclosed.

    Abstract translation: 在数据网络中提供接入层卫星架构的方法和系统,包括接收来自接入层网络设备的数据分组,所述数据分组包括与所述接入层网络设备上的端口相关联的虚拟局域网(VLAN)标识符,执行 基于接收到的数据分组来确定数据分组的目的地的路由查找过程,用与VLAN标识符相关联的媒体访问控制(MAC)地址和接收到的数据分组的端口更新ARP表,以及发送数据 分组到目的地网络设备。

Patent Agency Ranking