公开(公告)号：US20230254221A1

公开(公告)日：2023-08-10

申请号：US18295299

申请日：2023-04-04

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A

IPC: H04L41/00 ,  G06F16/22 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/0873 ,  H04L41/0893 ,  H04L41/14 ,  H04L9/40 ,  H04L69/22

CPC classification number: H04L41/24 ,  G06F16/2246 ,  H04L41/145 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/0873 ,  H04L41/0893 ,  H04L63/02 ,  H04L69/22

Abstract: A method includes maintaining, by a controller device that manages a plurality of network devices, a data structure and receiving, by the controller device, an indication of a stateful intent. The method further includes generating, by the controller device, a logical packet based on the stateful intent and determining, by the controller device, a dependent intent of the data structure based on the logical packet. The method further includes determining that the dependent intent conflicts with the stateful intent. The method further includes, in response to determining that the dependent intent conflicts with the stateful intent, determining, by the controller device, a resolution that resolves the conflict between the dependent intent and the stateful intent based on the dependent intent and the stateful intent and outputting, by the controller device, an indication of the resolution.

公开(公告)号：US20230195858A1

公开(公告)日：2023-06-22

申请号：US17589962

申请日：2022-02-01

Applicant: Juniper Networks, Inc.

Inventor： Viren L. SHAH ,  Jayanthi R ,  Ritesh SHELAT ,  Premchandar N ,  Bhaskar T. REDDY ,  Chandrasekhar A

IPC: G06F21/10 ,  G06F21/12 ,  G06F21/44 ,  G06F9/50 ,  G06N20/00

CPC classification number: G06F21/105 ,  G06F9/5072 ,  G06F21/12 ,  G06F21/44 ,  G06N20/00 ,  G06F2221/2141

Abstract: A device may receive license data identifying device licenses and organization licenses associated with an organization of users of a multi-tenant system, and may identify, in the license data, entitlements for licenses associated with the organization. The device may combine the entitlements to generate combined entitlements, and may determine an entitlement count of the combined entitlements. The device may add quantities of new entitlements to the entitlement count, and may identify, in the license data, roles of the users and capabilities associated with each of the roles. The device may map the entitlements and the capabilities to generate a mapping, and may authorize a particular user based on the mapping. The device may process usage of the entitlements, with a machine learning model, to predict future usage of the entitlements, and may determine entitlement recommendations based on the future usage. The device may provide the entitlement recommendations for display.

公开(公告)号：US11640291B2

公开(公告)日：2023-05-02

申请号：US17139773

申请日：2020-12-31

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R ,  Javier Antich

IPC: G06F8/65 ,  G06F16/901 ,  H04L41/12 ,  H04L41/00 ,  H04L67/00

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

公开(公告)号：US11582115B2

公开(公告)日：2023-02-14

申请号：US17470821

申请日：2021-09-09

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: H04L41/5019 ,  H04L41/0213

Abstract: In general, techniques are described for automatic intent provisioning and management in computer networks. A device comprising a processor, a memory, and an interface may perform the techniques. The processor may obtain a policy that includes high-level configuration data defining a service to be deployed within a network, the high-level configuration data including resource selector criteria that identifies one or more criteria for selecting a resource to support the service from a plurality of potential resources. The processor may also determine, based on the resource selector criteria, the resource to support the service from the plurality of potential resources, and translate the high-level configuration data to low-level configuration data specific to the determined resource. The memory may store the low-level configuration data specific to the determined resource. The interface may enable configuration, when provisioning the service, the determined resource using the low-level configuration data specific to the determined resource.

公开(公告)号：US20220263714A1

公开(公告)日：2022-08-18

申请号：US17657126

申请日：2022-03-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose ,  Jayanthi R

IPC: H04L41/0816 ,  H04L41/0213 ,  H04L41/085 ,  H04L41/12

Abstract: Techniques are disclosed for managing a network. In one example, a device configuration manager is configured to generate, in accordance with a device management protocol, a configuration change request representing a transaction having a first sub-transaction specifying a first configuration change for a network device of the network and a second sub-transaction specifying a second configuration change for the same network device. The device configuration manager is further configured to output the configuration change request to the network device and receive a reply message from the network device. The reply message includes a first response element specifying whether the first configuration change is successfully committed at the network device and a second response element specifying whether the second configuration change is successfully committed at the network device.

公开(公告)号：US20220210009A1

公开(公告)日：2022-06-30

申请号：US17247867

申请日：2020-12-28

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Frank Jas ,  Premchandar N ,  Amarnath B. Satyan

IPC: H04L12/24

Abstract: A method includes receiving a plurality of configurations comprising a first configuration for provisioning a first set of network services at a first resource of an edge device and a second configuration for provisioning a second set of network services at the first resource, a first configuration group identifier identifying a configuration group for the first configuration, and a first network performance parameter for the configuration group. The method further includes determining a performance factor for the first resource providing the first set of network services to one or more client devices. The method further includes, in response to determining that the performance factor does not satisfy the first network performance parameter for the configuration group and that the first configuration group identifier identifies the configuration group for the first configuration, moving the first configuration from the first resource to a second resource of the edge device.

公开(公告)号：US20220103417A1

公开(公告)日：2022-03-31

申请号：US17032799

申请日：2020-09-25

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Jayanthi R ,  Chandrasekhar A

IPC: H04L12/24

Abstract: An example method includes obtaining, by one or more processors, data indicating resource dependencies between a plurality of resources in a network and event dependencies between a plurality of network events and one or more of the plurality of resources; generating a Bayesian model based on resource types of the plurality of resources and event types of the plurality of network events; receiving an indication of a fault in the network; collecting fault data and generating, based on the Bayesian model and the fault data, a plurality of root cause hypotheses for the fault; ordering the plurality of root cause hypotheses based on respective root cause probabilities associated with the plurality of root cause hypotheses; and outputting the ordered plurality of root cause hypotheses.

公开(公告)号：US11283691B1

公开(公告)日：2022-03-22

申请号：US16949242

申请日：2020-10-21

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A

IPC: H04L12/24 ,  H04L29/06 ,  G06F16/22 ,  H04L41/00 ,  H04L69/22 ,  H04L41/0803 ,  H04L41/14 ,  H04L41/0893 ,  H04L41/0866 ,  H04L41/0873

Abstract: A method includes maintaining, by a controller device that manages a plurality of network devices, a data structure and receiving, by the controller device, an indication of a stateful intent. The method further includes generating, by the controller device, a logical packet based on the stateful intent and determining, by the controller device, a dependent intent of the data structure based on the logical packet. The method further includes determining that the dependent intent conflicts with the stateful intent. The method further includes, in response to determining that the dependent intent conflicts with the stateful intent, determining, by the controller device, a resolution that resolves the conflict between the dependent intent and the stateful intent based on the dependent intent and the stateful intent and outputting, by the controller device, an indication of the resolution.

公开(公告)号：US20220021576A1

公开(公告)日：2022-01-20

申请号：US17449626

申请日：2021-09-30

Applicant: Juniper Networks, Inc.

Inventor： Pradeep H. Krishnamurthy ,  Chandrasekhar A ,  Rahamath Sharif ,  Raviraj Satish Deshmukh

IPC: H04L12/24 ,  H04L12/46 ,  H04L29/12

Abstract: In one example, a network management system discovers a plurality of network devices behind a network address translation device, such as a firewall. The network management system may receive a model of a seed network device, generate a first activation configuration and commit the first activation configuration on the seed network device. The network management system may connect to the seed network device and discover neighboring devices from information in the seed network device. The network management system may connect to the neighboring devices, automatically create a model of the neighboring network devices, generate s activation configurations for the neighboring network devices and commit the activation configurations on the neighboring network devices. The network management system may iterative perform these steps until it discovers all the discoverable network devices behind the network address translation device.

公开(公告)号：US11200133B1

公开(公告)日：2021-12-14

申请号：US16731935

申请日：2019-12-31

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: H04L12/24 ,  G06F11/30 ,  G06N20/00 ,  H04L12/26

Abstract: In one example, a network management system (NMS) and method discovers device roles for network devices. The NMS includes a learning module configured to include a learning model, the learning model trained to associate configuration segments for each of a plurality of network devices with device roles performed by the network devices. The NMS discovers a network service on a network, receives configuration information from the discovered network service and splits the configuration information received from the discovered network service into configuration segments based on a vendor neutral yang model associated with the discovered network service. The NMS then determines if the discovered network service performs one or more of the device roles performed by the network devices used to train the learning model, wherein determining includes applying the learning model to the configuration segments of the discovered network service.