公开(公告)号：US20150029935A1

公开(公告)日：2015-01-29

申请号：US14299834

申请日：2014-06-09

Applicant: Cisco Technology, Inc.

Inventor： Alpesh S. Patel ,  Kent K. Leung ,  Gopal K. Dommety

IPC: H04L12/751 ,  H04W8/06

CPC classification number: H04L45/02 ,  H04W8/065 ,  H04W80/04

Abstract: In one embodiment, an apparatus receives an advertisement from each of one or more Home Agents, the advertisement including a first set of information associated with a corresponding one of the Home Agents, each advertisement being in a first protocol. The apparatus obtains the first set of information associated with a corresponding one of the Home Agents from each advertisement. The apparatus composes a router advertisement including a second set of information associated with at least one of the Home Agents, the router advertisement being in a second protocol. The apparatus then sends the router advertisement.

Abstract translation: 在一个实施例中，设备从一个或多个归属代理中的每一个接收广告，该广告包括与归属代理相应的一个相关联的第一组信息，每个广告处于第一协议。 该装置从每个广告获得与归属代理相应的一个相关联的第一组信息。 所述设备组成路由器通告，其包括与归属代理中的至少一个相关联的第二组信息，所述路由器通告处于第二协议。 然后设备发送路由器通告。

公开(公告)号：US20140169374A1

公开(公告)日：2014-06-19

申请号：US14180379

申请日：2014-02-14

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Srinath Gundavelli ,  Frank Brockners ,  Mark Grayson ,  Kent K. Leung ,  Flemming S. Andreasen

IPC: H04L12/56 ,  H04L29/06

CPC classification number: H04L45/741 ,  H04L12/4633 ,  H04L29/12367 ,  H04L29/12377 ,  H04L61/106 ,  H04L61/2514 ,  H04L61/2517 ,  H04L69/22

Abstract: An example method is provided and includes receiving a packet associated with a flow, determining a tunnel identifier for the flow, and determining a flow identifier for the flow. The method includes associating the flow identifier and the tunnel identifier to an Internet protocol (IP) address to generate a binding to be used for a network address and port translation (NAPT). In other embodiments, a routing decision is executed based on the binding between the identifiers and the IP address. The flow identifier can be a context identifier (CID), and the tunnel identifier can be a softwire tunnel ID. In yet other embodiments, the packet can be tagged as part of an encapsulation operation, which includes providing information about a network location at which the network address and port translation is to be executed.

Abstract translation: 提供了示例性方法，并且包括接收与流相关联的分组，确定流的隧道标识符，以及确定流的流标识符。 该方法包括将流标识符和隧道标识符与因特网协议（IP）地址相关联，以生成用于网络地址和端口转换（NAPT）的绑定。 在其他实施例中，基于标识符和IP地址之间的绑定来执行路由决定。 流标识符可以是上下文标识符（CID），隧道标识符可以是软线隧道ID。 在其他实施例中，分组可以被标记为封装操作的一部分，其包括提供关于将要执行网络地址和端口转换的网络位置的信息。

公开(公告)号：US10721211B2

公开(公告)日：2020-07-21

申请号：US15783706

申请日：2017-10-13

Applicant: Cisco Technology, Inc.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: H04L29/06 ,  H04L29/12

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

公开(公告)号：US10110433B2

公开(公告)日：2018-10-23

申请号：US14633572

申请日：2015-02-27

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Gary B. Mahaffey ,  Jayaraman R. Iyer ,  Michel Khouderchah ,  Kent K. Leung ,  Robert A. Mackie ,  Timothy P. Stammers ,  Hy Quoc Pham

IPC: H04L12/24 ,  H04L29/08 ,  H04W48/16 ,  H04W76/10

Abstract: A method is provided in one example embodiment and includes communicating a message from a network element to a remote data plane element in order to request a data plane resource for hosting a session for a particular subscriber. The remote data plane element is designated to host a data plane function for a particular mobile network subscriber and the data plane resource comprises at least one of memory space and processor allocation. The method further includes discovering nodes capable of supporting the control plane functions; discovering nodes capable of supporting the data plane functions for the session; and performing a system-specific internal configuration to support separation of the data plane functions and the control plane functions.

公开(公告)号：US10009751B2

公开(公告)日：2018-06-26

申请号：US14981585

申请日：2015-12-28

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Srinath Gundavelli ,  Vojislav Vucetic ,  Kent K. Leung

IPC: H04W8/04 ,  H04W12/06 ,  H04W48/16 ,  H04W8/08 ,  H04W8/18 ,  H04W8/02 ,  H04W8/26

CPC classification number: H04W8/04 ,  H04W8/02 ,  H04W8/08 ,  H04W8/18 ,  H04W8/26 ,  H04W12/06 ,  H04W48/16

Abstract: Embodiments are directed to a virtual mobility anchor network element to receive, from a packet gateway (PGW) node, a request for an internet protocol (IP) address for a mobile device, establish an IP address for the mobile device; and provide the IP address to the PGW node in response to the request for the IP address for the mobile device. The virtual mobility anchor network element is configured to receive IP traffic from a network location; determine a target destination for the IP traffic based on a destination IP address, the destination IP address comprising the second IP address; and forward the IP traffic to the PGW node associated with the destination IP address. The virtual mobility anchor network element is also configured to receive IP traffic from the PGW node; determine a target destination for the IP traffic; and route the IP traffic to the target destination.

公开(公告)号：US20180041474A1

公开(公告)日：2018-02-08

申请号：US15783706

申请日：2017-10-13

Applicant: Cisco Technology, Inc.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: H04L29/06 ,  H04L29/12

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

公开(公告)号：US09800549B2

公开(公告)日：2017-10-24

申请号：US14619759

申请日：2015-02-11

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kent K. Leung ,  Xun Wang ,  Andrew E. Ossipov ,  Zhijun Liu ,  Jonathan Augustine Kunder

IPC: G06F15/173 ,  H04L29/06 ,  H04L29/12

CPC classification number: H04L63/0254 ,  H04L61/2007 ,  H04L61/2061 ,  H04L63/0218

Abstract: An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.

公开(公告)号：US20150215810A1

公开(公告)日：2015-07-30

申请号：US14683228

申请日：2015-04-10

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Flemming S. Andreasen ,  Kent K. Leung ,  Michel Khouderchah ,  Jayaraman R. Iyer ,  Timothy P. Stammers

IPC: H04W28/02 ,  H04W48/16 ,  H04L12/721 ,  H04L12/46 ,  H04L12/707

CPC classification number: H04W28/0226 ,  H04L12/4633 ,  H04L29/12367 ,  H04L45/22 ,  H04L45/26 ,  H04L61/2514 ,  H04W40/24 ,  H04W48/16

Abstract: A method is provided in one example embodiment and includes receiving a data packet transported on a backhaul link at a first network element; de-capsulating the data packet; identifying whether the data packet is an upstream data packet; identifying whether the data packet matches an internet protocol (IP) access control list (ACL) or a tunnel endpoint identifier; and offloading the data packet from the backhaul link. In more specific embodiment, the method can include identifying that the data packet does not match the IP ACL or the tunnel endpoint identifier; and communicating the data packet to a second network element. In other examples, the method can include identifying that the data packet is a downstream data packet; identifying a service to be performed for the data packet that cannot be performed at the first network element; and communicating the data packet to a second network element.

Abstract translation: 在一个示例性实施例中提供了一种方法，并且包括接收在第一网络元件处的回程链路上传送的数据分组; 解封装数据包; 识别数据分组是否是上行数据分组; 识别数据分组是否与互联网协议（IP）访问控制列表（ACL）或隧道端点标识符匹配; 并从回程链路卸载数据包。 在更具体的实施例中，该方法可以包括识别数据分组与IP ACL或隧道端点标识符不匹配; 以及将所述数据分组传送到第二网络单元。 在其他示例中，该方法可以包括识别数据分组是下游数据分组; 识别对于在第一网络元件不能执行的数据分组执行的服务; 以及将所述数据分组传送到第二网络单元。

公开(公告)号：US20140282986A1

公开(公告)日：2014-09-18

申请号：US13842426

申请日：2013-03-15

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Kent K. Leung ,  Jayaraman R. Iyer ,  Bruce A. Thompson ,  Flemming S. Andreasen

IPC: H04L29/06

CPC classification number: H04L63/10 ,  H04L41/0896 ,  H04L63/0807 ,  H04L63/0876

Abstract: A method is provided and may include receiving a request for a network content delivery service from an access device; directing the access device to a network service provider for authentication for the network content delivery service; receiving a network authorization token from the access device, where the network authorization token is associated with the access device; obtaining a network access token from the network service provider; and binding the network access token to a content access token.

Abstract translation: 提供了一种方法，并且可以包括从接入设备接收对网络内容传送服务的请求; 将访问设备引导到网络服务提供商以进行网络内容传递服务的认证; 从所述接入设备接收网络授权令牌，其中所述网络授权令牌与所述接入设备相关联; 从网络服务提供商获取网络访问令牌; 并将网络访问令牌绑定到内容访问令牌。