Establishing WLAN association
    161.
    发明授权
    Establishing WLAN association 有权
    建立无线局域网关联

    公开(公告)号:US09445273B2

    公开(公告)日:2016-09-13

    申请号:US14648166

    申请日:2013-12-18

    发明人: Guoxiang Xu

    摘要: A method of establishing network connection between a network device and a WLAN is disclosed. The method includes: determining whether there is previous security association between the network device and the WLAN at the time of requesting for network association, and establishing a new security association between the network device and the WLAN using security data generated in the course of establishing the previous security association if there is the previous security association.

    摘要翻译: 公开了一种在网络设备和WLAN之间建立网络连接的方法。 该方法包括:在请求网络关联时确定网络设备与WLAN之间是否存在先前的安全关联,以及使用在建立网络设备的过程中生成的安全数据在网络设备和WLAN之间建立新的安全关联 以前的安全关联如果有以前的安全关联。

    PACKET PROCESSING
    162.
    发明申请
    PACKET PROCESSING 审中-公开
    分组处理

    公开(公告)号:US20160248665A1

    公开(公告)日:2016-08-25

    申请号:US15028248

    申请日:2014-10-09

    发明人: Changzhong GE

    摘要: According to an example, a packet to be processed is compared with a rule in a combined access control list (ACL), wherein the combined ACL includes rules corresponding to different service types.

    摘要翻译: 根据一个示例,将待处理的分组与组合的访问控制列表(ACL)中的规则进行比较,其中组合的ACL包括对应于不同的服务类型的规则。

    Packet forwarding
    164.
    发明授权
    Packet forwarding 有权
    包转发

    公开(公告)号:US09397942B2

    公开(公告)日:2016-07-19

    申请号:US14405367

    申请日:2013-09-02

    发明人: Yubing Song

    摘要: According to an example, to forward a packet, an access layer device searches a Layer 2 forwarding table according to a source Media Access Control (MAC) address of the packet, and replaces the source MAC address with a mapped virtual MAC address in a matching Layer 2 forwarding entry. The Layer 2 forwarding table is searched according to a destination MAC address of the Ethernet packet. In response to determining that a Layer 2 forwarding entry matching the destination MAC address of the Ethernet packet does not include a MAC address mapped to the destination MAC address, Very Large Layer 2 (VLL2) network protocol encapsulation is performed on the Ethernet packet of which the source MAC address is replaced according to an egress port in the Layer 2 forwarding entry matching the destination MAC address; and the Ethernet packet encapsulated with a VLL2 network protocol header is sent via the egress port.

    摘要翻译: 根据一个示例,为了转发报文,接入层设备根据报文的源媒体访问控制(MAC)地址查找二层转发表,并将源MAC地址替换成匹配的映射虚拟MAC地址 二层转发表项。 根据以太网报文的目的MAC地址查找二层转发表。 响应于确定与以太网分组的目的MAC地址匹配的二层转发表项不包含映射到目的MAC地址的MAC地址,对其以太网报文进行超大二层(VLL2)网络协议封装 根据与目的MAC地址匹配的二层转发表项中的出口端口替换源MAC地址; 并且通过出口端口发送用VLL2网络协议头封装的以太网数据包。

    DEFENDING AGAINST FLOW ATTACKS
    165.
    发明申请
    DEFENDING AGAINST FLOW ATTACKS 审中-公开
    防范流量攻击

    公开(公告)号:US20160197954A1

    公开(公告)日:2016-07-07

    申请号:US14903189

    申请日:2014-09-29

    发明人: Zhonghai LUO

    IPC分类号: H04L29/06

    摘要: A network device maintains a sharing token bucket for all sessions in a semi-connection state; a packet is received by the network device; a flow control for the packet is performed by using the sharing token bucket when determining the packet conforms to the semi-connection state; and a flow control for the packet is performed by using a dedicated token bucket of a session corresponding to the packet when determining the packet conforms to a full-connection state.

    摘要翻译: 网络设备为半连接状态的所有会话维护共享令牌桶; 网络设备接收到分组; 当确定分组符合半连接状态时,通过使用共享令牌桶来执行分组的流控制; 并且当确定分组符合全连接状态时,通过使用与分组对应的会话的专用令牌桶来执行分组的流控制。

    FORWARDING A DHCP PACKET
    166.
    发明申请
    FORWARDING A DHCP PACKET 审中-公开
    转发DHCP包

    公开(公告)号:US20160191460A1

    公开(公告)日:2016-06-30

    申请号:US14899819

    申请日:2014-09-11

    发明人: Xiaohui CUI

    摘要: According to an example, a relay device receives a DHCP request packet sent from a DHCP client, in which the DHCP request packet includes a user information sub-option including a node identifier of the DHCP client. The relay device adds a node identifier of the relay device and path information of receiving the DHCP request packet by the relay device to a relay agent information sub-option in the DHCP request packet, and forwards the DHCP request packet to a DHCP server, so that the DHCP server determines network topology according to the user information sub-option and the relay agent information sub-option.

    摘要翻译: 根据一个示例,中继设备接收DHCP客户端发送的DHCP请求报文,其中DHCP请求报文包括一个包含DHCP客户端节点标识符的用户信息子选项。 中继设备将中继设备的节点标识符和中继设备接收DHCP请求报文的路径信息添加到DHCP请求报文中的中继代理信息子选项,并将DHCP请求报文转发给DHCP服务器, DHCP服务器根据用户信息子选项和中继代理信息子选项确定网络拓扑。

    DETECTING NICKNAME CONFLICT
    167.
    发明申请
    DETECTING NICKNAME CONFLICT 审中-公开
    检测NICKNAME冲突

    公开(公告)号:US20160173362A1

    公开(公告)日:2016-06-16

    申请号:US14891877

    申请日:2014-05-20

    发明人: Jin QU

    摘要: After a RB in a TRILL network starts or establishes neighbor relationships with other RBs, the RB sends a nickname conflict detection packet. After receiving the packet, a DRB replies with a response packet carrying nickname information corresponding to all LSPs in the LSDB to the RB. The RB receives the response packet sent from the DRB, checks whether a nickname has a conflict with nicknames of other RBs and regenerates a nickname that is not conflict with the nicknames of other RBs.

    摘要翻译: 在TRILL网络中的RB启动或建立与其他RB的邻居关系后,RB发送昵称冲突检测包。 接收到报文后,DRB应答报文携带与LSDB中所有LSP相对应的昵称信息的响应报文。 RB接收从DRB发送的响应分组,检查昵称是否与其他RB的昵称有冲突,并重新生成不与其他RB的昵称冲突的昵称。

    FORWARDING PACKETS
    168.
    发明申请
    FORWARDING PACKETS 有权
    前进包

    公开(公告)号:US20160149724A1

    公开(公告)日:2016-05-26

    申请号:US14891834

    申请日:2014-05-15

    发明人: Feng WANG

    摘要: According to various examples, in a site network, a layer-2 gateway device via which a terminal accesses a layer-2 network establishes a virtual link and an IS-IS relation with a layer-3 edge device, sends information of an learned MAC address to the layer-3 edge device, receives a packet sent by the layer-3 edge device via the virtual link, performs tunnel decapsulation on the packet, and searches a local MAC forwarding table based on a VLAN ID and a destination MAC address in the decapsulated packet to forward the packet in the site network according to a search result.

    摘要翻译: 根据各种示例,在站点网络中,终端访问二层网络的二层网关设备与第三层边缘设备建立虚拟链路和IS-IS关系,发送学习MAC的信息 地址到第3层边缘设备,通过虚拟链路接收第3层边缘设备发送的报文,对报文进行隧道解封装,并根据VLAN ID和目的MAC地址在本地MAC转发表中进行搜索 解封装的分组根据搜索结果转发站点网络中的分组。