公开(公告)号：US20220103473A1

公开(公告)日：2022-03-31

申请号：US17032450

申请日：2020-09-25

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L12/741 ,  H04L12/751 ,  H04L29/06

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US11336647B2

公开(公告)日：2022-05-17

申请号：US17038222

申请日：2020-09-30

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L29/06 ,  H04L65/1069 ,  H04L101/622 ,  H04L41/0604 ,  H04L45/00 ,  H04L43/16

Abstract: Embodiments improve error detection and recovery in media access control security sessions. A MACsec session is torn down after three liveness time intervals elapse without receiving a MACsec key exchange protocol data unit (MKPDU) from a remote peer. This delay between a cessation of effective network communication over the MACsec session and the expiration of the three “liveness” intervals results in increased packet loss and an increased network convergence time as a network continues to route/forward data over the MACsec session for a period of time after the MACsec session has entered secure block mode. To solve this problem, embodiments define a new alarm, called a MACsec link alert, which is raised earlier than a MACsec session timeout generated by traditional embodiments. The MACsec link alert is raised, by at least some embodiments, after a failure to successfully receive an MKPDU from the remote peer after a single MACsec “liveness” timeout interval elapses.

公开(公告)号：US12034638B2

公开(公告)日：2024-07-09

申请号：US17752096

申请日：2022-05-24

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L45/74 ,  H04L9/40 ,  H04L45/02 ,  H04L69/164 ,  H04L69/22

CPC classification number: H04L45/74 ,  H04L45/02 ,  H04L63/0485 ,  H04L69/164 ,  H04L69/22

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US20220286394A1

公开(公告)日：2022-09-08

申请号：US17752096

申请日：2022-05-24

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L45/74 ,  H04L45/02 ,  H04L9/40 ,  H04L69/164 ,  H04L69/22

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US20220103551A1

公开(公告)日：2022-03-31

申请号：US17038222

申请日：2020-09-30

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L29/06 ,  H04L29/12 ,  H04L12/26 ,  H04L12/24 ,  H04L12/707

Abstract: Embodiments improve error detection and recovery in media access control security sessions. A MACsec session is torn down after three liveness time intervals elapse without receiving a MACsec key exchange protocol data unit (MKPDU) from a remote peer. This delay between a cessation of effective network communication over the MACsec session and the expiration of the three “liveness” intervals results in increased packet loss and an increased network convergence time as a network continues to route/forward data over the MACsec session for a period of time after the MACsec session has entered secure block mode. To solve this problem, embodiments define a new alarm, called a MACsec link alert, which is raised earlier than a MACsec session timeout generated by traditional embodiments. The MACsec link alert is raised, by at least some embodiments, after a failure to successfully receive an MKPDU from the remote peer after a single MACsec “liveness” timeout interval elapses.