Secure VLANs
    21.
    发明申请
    Secure VLANs 有权
    安全VLAN

    公开(公告)号:US20080298373A1

    公开(公告)日:2008-12-04

    申请号:US12132680

    申请日:2008-06-04

    CPC classification number: H04L12/4641 H04L63/20

    Abstract: A VLAN is implemented with a logical hub and spoke topology that obviates local switching. Member devices are connected to a hub device such as a router via intermediate devices such as Layer 2 switches that support individual IP subnets within the VLAN. The Layer 2 switch does not allow bridging, so there is no IP subnet broadcast domain. Further, the Layer 2 switch implements only a single logical broadcast uplink port which is connected to the router. The Layer 2 switch also implements only point-to-point downlink ports, i.e., to individual member devices. Consequently, all traffic is forced to flow through the router, e.g., broadcast traffic, multicast traffic and traffic of unknown destination received by the Layer 2 switch from a member device is only flooded to the router, and the router performs intra-subnet routing in addition to routing between subnets and between VLANs. The router subjects all traffic to security measures and provide services including packet inspection, firewall, policing, metering, accounting, anti-virus, marking, filtering and encryption, and thereby reduce or eliminate the drawbacks associated with local switching.

    Abstract translation: 使用逻辑集线器和辐条拓扑实现VLAN,从而避免本地交换。 成员设备通过诸如支持VLAN内各个IP子网的二层交换机等中间设备连接到路由器等集线器设备。 第二层交换机不允许桥接,因此没有IP子网广播域。 此外,二层交换机仅实现连接到路由器的单个逻辑广播上行链路端口。 第二层交换机也仅实现点到点下行链路端口,即仅对单个成员设备。 因此,所有流量都被强制流经路由器,例如广播流量,组播流量和二层交换机从成员设备收到的未知目的地址的流量只被洪泛到路由器,路由器执行子网内路由 除了在子网之间和VLAN之间进行路由。 路由器对所有流量进行安全措施,并提供包检测,防火墙,监管,计费,计费,防病毒,标记,过滤和加密等服务,从而减少或消除与本地交换相关的缺点。

    SNMP request processing within distributed device architecture
    22.
    发明授权
    SNMP request processing within distributed device architecture 有权
    分布式设备架构内的SNMP请求处理

    公开(公告)号:US08825825B2

    公开(公告)日:2014-09-02

    申请号:US13412624

    申请日:2012-03-06

    CPC classification number: H04L41/0213 H04L41/0226

    Abstract: A distributed device architecture includes a master device and one or more member devices. A simple network management protocol (SNMP) agent of a master device receives an SNMP request from a managing device. Where the SNMP request pertains to a given member device, and where the SNMP request requires involvement of the given member device to fulfill the SNMP request, the master device generates a non-SNMP request corresponding to the SNMP request and transmits the non-SNMP request to the given member device. A non-SNMP agent of the given member device processes the non-SNMP request and transmits processing results back to the master device. The master device generates an SNMP response corresponding to the processing results, and the SNMP agent of the master device transmits the SNMP response back to the managing device.

    Abstract translation: 分布式设备架构包括主设备和一个或多个成员设备。 主设备的简单网络管理协议(SNMP)代理从管理设备接收SNMP请求。 在SNMP请求与给定成员设备相关的地方,SNMP请求需要参与给定成员设备来满足SNMP请求的情况下,主设备生成对应于SNMP请求的非SNMP请求,并发送非SNMP请求 到给定的成员设备。 给定成员设备的非SNMP代理处理非SNMP请求,并将处理结果发送回主设备。 主设备生成对应于处理结果的SNMP响应,主设备的SNMP代理将SNMP响应发送回管理设备。

    Mac learning in a trill network
    23.
    发明授权
    Mac learning in a trill network 有权
    Mac学习在颤抖的网络

    公开(公告)号:US08750307B2

    公开(公告)日:2014-06-10

    申请号:US13315463

    申请日:2011-12-09

    CPC classification number: H04L41/0654 H04L45/245 H04L45/28 H04L45/66 Y02D50/30

    Abstract: A switch of a data network implements both a bridge and a virtual bridge. In response to receipt of a data frame by the switch from an external link, the switch performs a lookup in a data structure using a source media access control (SMAC) address specified by the data frame. The switch determines if the external link is configured in a link aggregation group (LAG) and if the SMAC address is newly learned. In response to a determination that the external link is configured in a LAG and the SMAC address is newly learned, the switch associates the SMAC with the virtual bridge and communicates the association to a plurality of bridges in the data network.

    Abstract translation: 数据网络的交换机既实现了桥接器又实现了一个虚拟桥接器。 响应于交换机从外部链路接收到数据帧,交换机使用由数据帧指定的源媒体访问控制(SMAC)地址在数据结构中执行查找。 交换机确定在链路聚合组(LAG)中是否配置了外部链路,如果新学习到SMAC地址。 响应于外部链路被配置在LAG中并且新学习到SMAC地址的确定,交换机将SMAC与虚拟网桥相关联,并将该关联传送到数据网络中的多个网桥。

    DIAGNOSTIC SYSTEMS FOR DISTRIBUTED NETWORK
    24.
    发明申请
    DIAGNOSTIC SYSTEMS FOR DISTRIBUTED NETWORK 有权
    分布式网络诊断系统

    公开(公告)号:US20140068338A1

    公开(公告)日:2014-03-06

    申请号:US13597019

    申请日:2012-08-28

    Abstract: A diagnostic system provides identification of symptoms in a distributed network and an engine for providing recommended rectification of error sources that correspond to the symptoms. The distributed network may be accessed for current statistics. Symptoms may be identified that correspond to the current statistics. A recommended course of action for the distributed network may be provided based on a predetermined list of courses of actions that correspond to rectifying the performance in the error sources.

    Abstract translation: 诊断系统提供分布式网络和引擎中的症状的识别,以提供对应于症状的错误源的推荐整流。 可以访问分布式网络以获得当前统计信息。 可能会识别出符合当前统计资料的症状。 可以基于对应于纠正错误源中的性能的行动课程的预定列表来提供针对分布式网络的推荐行动方案。

    SNMP request processing within distributed device architecture
    25.
    发明申请
    SNMP request processing within distributed device architecture 有权
    分布式设备架构内的SNMP请求处理

    公开(公告)号:US20130238771A1

    公开(公告)日:2013-09-12

    申请号:US13412624

    申请日:2012-03-06

    CPC classification number: H04L41/0213 H04L41/0226

    Abstract: A distributed device architecture includes a master device and one or more member devices. A simple network management protocol (SNMP) agent of a master device receives an SNMP request from a managing device. Where the SNMP request pertains to a given member device, and where the SNMP request requires involvement of the given member device to fulfill the SNMP request, the master device generates a non-SNMP request corresponding to the SNMP request and transmits the non-SNMP request to the given member device. A non-SNMP agent of the given member device processes the non-SNMP request and transmits processing results back to the master device. The master device generates an SNMP response corresponding to the processing results, and the SNMP agent of the master device transmits the SNMP response back to the managing device.

    Abstract translation: 分布式设备架构包括主设备和一个或多个成员设备。 主设备的简单网络管理协议(SNMP)代理从管理设备接收SNMP请求。 在SNMP请求与给定成员设备相关的地方,SNMP请求需要参与给定成员设备来满足SNMP请求的情况下,主设备生成对应于SNMP请求的非SNMP请求,并发送非SNMP请求 到给定的成员设备。 给定成员设备的非SNMP代理处理非SNMP请求,并将处理结果发送回主设备。 主设备生成对应于处理结果的SNMP响应,主设备的SNMP代理将SNMP响应发送回管理设备。

    HIGH AVAILABILITY DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK ARCHITECTURE
    26.
    发明申请
    HIGH AVAILABILITY DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK ARCHITECTURE 有权
    高可用性分布式织物协议(DFP)切换网络架构

    公开(公告)号:US20130064068A1

    公开(公告)日:2013-03-14

    申请号:US13229891

    申请日:2011-09-12

    CPC classification number: H04L12/4604 H04L41/0668 H04L49/354 H04L49/557

    Abstract: In a switching network, each of a plurality of lower tier entities is coupled to each of multiple master switches at an upper tier by a respective one of multiple links. At each of the multiple master switches, a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier are implemented on each of a plurality of ports. Each of the plurality of lower tier entities implements a respective egress port mapping indicating which of its plurality of RPIs transmits egress data traffic through each of its multiple links to the multiple master switches. In response to failure of one of the multiple links coupling a particular lower tier entity to a particular master switch, the particular lower tier entity updates its egress port mapping to redirect egress data traffic to another of the multiple master switches without packet dropping.

    Abstract translation: 在交换网络中,多个下层实体中的每一个通过多个链路中的相应一个在较高层被耦合到多个主交换机中的每一个。 在多个主交换机中的每一个上,在多个端口中的每个端口上实现多个虚拟端口,每个虚拟端口分别对应于较低层的多个远程物理接口(RPI)中的相应一个。 多个下层实体中的每一个实现相应的出口端口映射,指示其多个RPI中的哪一个通过其到多个主交换机的多个链路中的每一个传送出口数据业务。 响应于将特定下层实体耦合到特定主交换机的多个链路之一的故障,特定的下层实体更新其出口端口映射以将出口数据业务重定向到多个主交换机中的另一个而不丢包。

    UPDATING A SWITCH SOFTWARE IMAGE IN A DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK
    27.
    发明申请
    UPDATING A SWITCH SOFTWARE IMAGE IN A DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK 审中-公开
    在分布式织物协议(DFP)切换网络中更新开关软件映像

    公开(公告)号:US20130064066A1

    公开(公告)日:2013-03-14

    申请号:US13229867

    申请日:2011-09-12

    CPC classification number: H04L41/0816 H04L41/082

    Abstract: A switching network has a plurality of switches including at least a switch and a managing master switch. At the managing master switch, a first capability vector (CV) is received from the switch. The managing master switch determines whether the first CV is compatible with at least a second CV in a network membership data structure that records CVs of multiple switches in the switching network. In response to detecting an incompatibility, the managing master switch initiates an image update to an image of the switch. In response to a failure of the image update at the switch, the switch boots utilizing a mini-DC module that reestablishes communication between the switch with the managing master switch and retries the image update.

    Abstract translation: 交换网络具有至少包括交换机和管理主交换机的多个交换机。 在管理主交换机上,从交换机接收到第一个能力向量(CV)。 管理主交换机确定第一个CV是否与记录交换网络中多个交换机的CV的网络成员资格数据结构中的至少第二个CV兼容。 响应于检测到不兼容性,管理主交换机启动对交换机的图像的图像更新。 为了响应交换机上的图像更新失败,开关使用小直流模块启动,该模块重新建立交换机与管理主交换机之间的通信,并重试映像更新。

    DATA TRAFFIC HANDLING IN A DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK ARCHITECTURE
    29.
    发明申请
    DATA TRAFFIC HANDLING IN A DISTRIBUTED FABRIC PROTOCOL (DFP) SWITCHING NETWORK ARCHITECTURE 审中-公开
    分布式织物协议(DFP)切换网络架构中的数据传输处理

    公开(公告)号:US20120287785A1

    公开(公告)日:2012-11-15

    申请号:US13107895

    申请日:2011-05-14

    CPC classification number: H04L49/70 H04L47/20 H04L47/627 H04L49/356

    Abstract: A switching network includes an upper tier having a master switch and a lower tier including a plurality of lower tier entities. The master switch, which has a plurality of ports each coupled to a respective lower tier entity, implements on each of the ports a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier entity coupled to that port. Data traffic communicated between the master switch and RPIs is queued within virtual ports that correspond to the RPIs with which the data traffic is communicated. The master switch applies data handling to the data traffic in accordance with a control policy based at least upon the virtual port in which the data traffic is queued, such that the master switch applies different policies to data traffic queued to two virtual ports on the same port of the master switch.

    Abstract translation: 交换网络包括具有主交换机的上层和包括多个下层实体的较低层。 主交换机具有多个端口,每个端口各自耦合到相应的下层实体,在每个端口上实现多个虚拟端口,每个虚拟端口对应于下层的多个远程物理接口(RPI)中的相应一个 实体耦合到该端口。 在主交换机和RPI之间通信的数据业务在对应于数据业务与之通信的RPI的虚拟端口内排队。 主交换机至少基于数据流量排队的虚拟端口,根据控制策略对数据流量应用数据处理,使得主交换机将不同的策略应用于排队到同一个虚拟端口的数据业务 主交换机的端口

    Secure VLANs
    30.
    发明授权

    公开(公告)号:US09660829B2

    公开(公告)日:2017-05-23

    申请号:US12132680

    申请日:2008-06-04

    CPC classification number: H04L12/4641 H04L63/20

    Abstract: A VLAN is implemented with a logical hub and spoke topology that obviates local switching. Member devices are connected to a hub device such as a router via intermediate devices such as Layer 2 switches that support individual IP subnets within the VLAN. The Layer 2 switch does not allow bridging, so there is no IP subnet broadcast domain. Further, the Layer 2 switch implements only a single logical broadcast uplink port which is connected to the router. The Layer 2 switch also implements only point-to-point downlink ports, i.e., to individual member devices. Consequently, all traffic is forced to flow through the router, e.g., broadcast traffic, multicast traffic and traffic of unknown destination received by the Layer 2 switch from a member device is only flooded to the router, and the router performs intra-subnet routing in addition to routing between subnets and between VLANs. The router subjects all traffic to security measures and provide services including packet inspection, firewall, policing, metering, accounting, anti-virus, marking, filtering and encryption, and thereby reduce or eliminate the drawbacks associated with local switching.

Patent Agency Ranking