公开(公告)号：US20200228404A1

公开(公告)日：2020-07-16

申请号：US16368624

申请日：2019-03-28

Applicant: Cisco Technology, Inc.

Inventor： Sanjay Kumar Hooda ,  Muninder Singh Sambi ,  Victor Moreno ,  Prakash C. Jain ,  Tarunesh Ahuja ,  Satish Kondalam

IPC: H04L12/24 ,  H04L12/46 ,  G06F9/455

Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.

公开(公告)号：US10693733B2

公开(公告)日：2020-06-23

申请号：US15912839

申请日：2018-03-06

Applicant: Cisco Technology, Inc.

Inventor： Sanjay Hooda ,  Johnson Leong ,  Satish Kondalam ,  Victor Moreno ,  Rohan Grover

IPC: H04L12/24 ,  H04L29/12 ,  H04L12/947 ,  H04L12/931

Abstract: A method for establishing a partitioned fabric network is described. The method includes establishing a fabric network including a plurality of border nodes to couple the fabric network to one or more external data networks and a plurality of edge nodes to couple to the fabric network to one or more hosts. The method further includes defining a plurality of partitions of the fabric network. The method further includes registering each of the plurality of partitions with a corresponding one of the plurality of border nodes and with each of the plurality of edge nodes.

公开(公告)号：US10547467B2

公开(公告)日：2020-01-28

申请号：US15792180

申请日：2017-10-24

Applicant: Cisco Technology, Inc.

Inventor： Sanjay Kumar Hooda ,  Prakash C. Jain ,  Rishabh Parekh ,  Atri Indiresan ,  Satish Kondalam ,  Victor Moreno

IPC: H04L12/18 ,  H04L29/12 ,  H04L29/06 ,  H04L12/853

Abstract: A method including determining that network traffic being transmitted is unicast or multicast; mapping to which virtual network and locator address each host belongs; generating leaking data for unicast and multicast traffic, wherein the leaking data indicates that a first virtual network leaks traffic to a second virtual network; receiving a request from the second virtual network to receive traffic from a host in the first virtual network; determining, based on the leaking data and the type of traffic being transmitted, if the first virtual network leaks traffic to the second virtual network; if the first virtual network leaks traffic to the second virtual network, determining a locator address for the host in the first virtual network using the mapping data; and transmitting the locator address for the host to the second virtual network to enable traffic leaking from the host to the second virtual network is disclosed.

公开(公告)号：US20190089611A1

公开(公告)日：2019-03-21

申请号：US15710314

申请日：2017-09-20

Applicant: Cisco Technology, Inc.

Inventor： Satish Kondalam ,  Victor Moreno ,  Lukas Krattiger

IPC: H04L12/26 ,  H04L12/24

Abstract: Systems and methods are disclosed for determining a distributed health score for an aggregation of network devices. Device health data relevant to a set of key performance indicators is received, and a health score of a first device is determined based at least in part on the set of key performance indicators. The determined health score is then transmitted to at least a second device on the network. A determination of whether to take a corrective action associated with the first device is based on the determined health score.

公开(公告)号：US09912584B2

公开(公告)日：2018-03-06

申请号：US14536381

申请日：2014-11-07

Applicant: Cisco Technology, Inc.

Inventor： Fabio Maino ,  Victor Moreno ,  Satyam Sinha

IPC: G06F9/455 ,  G06F15/16 ,  H04L12/723 ,  G06F9/50 ,  G06F21/53 ,  H04L12/46 ,  H04L12/713 ,  H04L12/715 ,  H04L29/08 ,  H04L12/721 ,  H04L12/931

CPC classification number: H04L45/505 ,  G06F9/45558 ,  G06F9/5077 ,  G06F21/53 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L12/4641 ,  H04L45/586 ,  H04L45/64 ,  H04L45/66 ,  H04L49/70 ,  H04L67/1002 ,  H04L67/28

Abstract: Methods and apparatus for optimizing data center routing in the event of virtual machine (VM) mobility are provided. In one embodiment, a first gateway router, acting as an interface between an Ethernet Virtual Private Network (EVPN) domain and a Locator/ID Separation Protocol (LISP) domain, detects EVPN mobility messages advertised when a VM that has moved connects to a gateway router at a data center. The first gateway router then initiates a LISP mobility event that registers the new location of the moved VM to a LISP mapping system. In another embodiment, the first gateway router may notify a second gateway router, located at another data center from which the VM departed, to clean up the state maintained in that data center. This notification may be made via EVPN or LISP mechanisms. In response, the second gateway router may insert a new sequence into the other data center.

公开(公告)号：US20140307541A1

公开(公告)日：2014-10-16

申请号：US13964327

申请日：2013-08-12

Applicant: Cisco Technology, Inc.

Inventor： Gaurav Badoni ,  Dhananjaya Rao ,  Hasmit Grover ,  Senthil Kenchiah ,  Victor Moreno

IPC: H04L12/703 ,  H04L12/721

CPC classification number: H04L45/28 ,  H04L45/12

Abstract: Techniques are presented herein for optimizing traffic routing in overlay networks. At a first edge device located at a first site in a network, a message is received that indicates address information of a network device. The address information of the network device is stored in an address table. The address information is associated with a site identifier that identifies a second site at which the network device is located. The site identifier is mapped to an identifier associated with a second edge device that is responsible for routing traffic to network devices at the second site.

Abstract translation: 本文介绍了优化覆盖网络中的流量路由的技术。 在位于网络中的第一站点的第一边缘设备处，接收到指示网络设备的地址信息的消息。 网络设备的地址信息存储在地址表中。 地址信息与标识网络设备所在的第二站点的站点标识符相关联。 站点标识符被映射到与负责将通信路由到第二站点处的网络设备的第二边缘设备相关联的标识符。