-
公开(公告)号：US11658876B2
公开(公告)日：2023-05-23
申请号：US17377378
申请日：2021-07-16
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , H04L12/46 , G06F9/455
CPC classification number: H04L41/0893 , G06F9/45558 , H04L12/4633 , H04L12/4641 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US11316782B2
公开(公告)日：2022-04-26
申请号：US16864402
申请日：2020-05-01
Applicant: Cisco Technology, Inc.
Inventor： Satish Kondalam , Sanjay Kumar Hooda , Prakash C. Jain , Vikram Vikas Pendharkar
IPC: H04L12/721 , H04L12/18 , H04L12/751 , H04L45/00 , H04L45/02
Abstract: Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.
-
公开(公告)号：US20220006738A1
公开(公告)日：2022-01-06
申请号：US17476462
申请日：2021-09-15
Applicant: Cisco Technology, Inc.
Inventor： Prakash C. Jain , Sanjay Kumar Hooda , Satish Kondalam , Raja Janardanan , Aaditya Vadnere , Shivangi Sharma
IPC: H04L12/747 , H04L12/813 , H04L12/741 , H04L12/715 , H04L12/801
Abstract: Systems, methods, and computer-readable media for communicating policy changes in a Locator/ID Separation Protocol (LISP) based network deployment include receiving, at a first routing device, a first notification from a map server, the first notification indicating a change in a policy for LISP based communication between at least a first endpoint device and at least a second endpoint device, the first endpoint device being connected to a network fabric through the first routing device and the second endpoint device being connected to the network fabric through a second routing device. The first routing device forwards a second notification to the second routing device if one or more entries of a first map cache implemented by the first routing device are affected by the policy change, the second notification indicating a set of one or more endpoints connected to the second routing device that are affected by the policy change.
-
公开(公告)号：US20210344565A1
公开(公告)日：2021-11-04
申请号：US17377378
申请日：2021-07-16
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US20240314036A1
公开(公告)日：2024-09-19
申请号：US18677720
申请日：2024-05-29
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , G06F9/455 , H04L12/46
CPC classification number: H04L41/0893 , G06F9/45558 , H04L12/4633 , H04L12/4641 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
Patent Agency Ranking
公开(公告)号：US20230269139A1
公开(公告)日：2023-08-24
申请号：US18304890
申请日：2023-04-21
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , H04L12/46 , G06F9/455
CPC classification number: H04L41/0893 , H04L12/4641 , G06F9/45558 , H04L12/4633 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US11516184B2
公开(公告)日：2022-11-29
申请号：US16561360
申请日：2019-09-05
Applicant: Cisco Technology, Inc.
Inventor： Prakash C. Jain , Sanjay Kumar Hooda , Satish Kondalam
Abstract: Systems, methods, and computer-readable media for preserving source host context when firewall policies are applied to traffic in an enterprise network fabric. A data packet to a destination host from a source host can be received at a first border node instance in an enterprise network fabric as part of network traffic. The data packet can include a context associated with the source host. Further, the data packet can be sent to a firewall of the enterprise network fabric and can be received at a second border node instance after the firewall applies a firewall policy to the data packet. The data packet can then be selectively encapsulated with the context associated with the source host at the second border node instance for applying one or more policies to control transmission of the network traffic through the enterprise network fabric.
-
公开(公告)号：US20210344591A1
公开(公告)日：2021-11-04
申请号：US16864402
申请日：2020-05-01
Applicant: Cisco Technology, Inc.
Inventor： Satish Kondalam , Sanjay Kumar Hooda , Prakash C. Jain , Vikram Vikas Pendharkar
IPC: H04L12/721 , H04L12/18 , H04L12/751
Abstract: Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.
-
公开(公告)号：US20190132209A1
公开(公告)日：2019-05-02
申请号：US15912839
申请日：2018-03-06
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Hooda , Johnson Leong , Satish Kondalam , Victor Moreno , Rohan Grover
IPC: H04L12/24 , H04L12/947 , H04L29/12
Abstract: A method for establishing a partitioned fabric network is described. The method includes establishing a fabric network including a plurality of border nodes to couple the fabric network to one or more external data networks and a plurality of edge nodes to couple to the fabric network to one or more hosts. The method further includes defining a plurality of partitions of the fabric network. The method further includes registering each of the plurality of partitions with a corresponding one of the plurality of border nodes and with each of the plurality of edge nodes.
-
公开(公告)号：US12028250B2
公开(公告)日：2024-07-02
申请号：US18323263
申请日：2023-05-24
Applicant: Cisco Technology, Inc.
Inventor： Prakash C. Jain , Sanjay Kumar Hooda , Satish Kondalam , Raja Janardanan , Aaditya Vadnere , Shivangi Sharma
Abstract: Systems, methods, and computer-readable media for communicating policy changes in a Locator/ID Separation Protocol (LISP) based network deployment include receiving, at a first routing device, a first notification from a map server, the first notification indicating a change in a policy for LISP based communication between at least a first endpoint device and at least a second endpoint device, the first endpoint device being connected to a network fabric through the first routing device and the second endpoint device being connected to the network fabric through a second routing device. The first routing device forwards a second notification to the second routing device if one or more entries of a first map cache implemented by the first routing device are affected by the policy change, the second notification indicating a set of one or more endpoints connected to the second routing device that are affected by the policy change.
-
-
-
-
-
-
-
-
-
Search Results
30
records
(took 0.018 seconds)
