公开(公告)号：US09461940B2

公开(公告)日：2016-10-04

申请号：US14326859

申请日：2014-07-09

申请人： Foundry Networks, LLC

发明人： Yuen Fai Wong

IPC分类号： H04L12/28 ,  H04L12/931 ,  H04L12/46 ,  H04L12/743 ,  H04L12/935 ,  H04Q11/04 ,  H04L5/14 ,  H04L12/741

CPC分类号： H04L49/352 ,  H04L5/14 ,  H04L12/4645 ,  H04L45/745 ,  H04L45/7453 ,  H04L49/30 ,  H04L49/3063 ,  H04Q11/0428

摘要： The present invention provides systems and methods for providing data transmission speeds at or in excess of 10 gigabits per second between one or more source devices and one or more destination devices. According to one embodiment, the system of the present invention comprises a first and second media access control (MAC) interfaces to facilitate receipt and transmission of packets over an associated set of physical interfaces. The system also contemplates a first and second field programmable gate arrays (FPGA) coupled to the MAC interfaces and an associated first and second memory structures, the first and second FPGAs are configured to perform initial processing of packets received from the first and second MAC interfaces and to schedule the transmission of packets to the first and second MAC interface for transmission to one or more destination devices. The first and second FPGAs are further operative to dispatch and retrieve packets to and from the first and second memory structures. A third FPGA, coupled to the first and second memory structures and a backplane, is operative to retrieve and dispatch packets to and from the first and second memory structures, compute appropriate destinations for packets and organize packets for transmission. The third FPGA is further operative to receive and dispatch packets to and from the backplane.

摘要翻译： 本发明提供了用于在一个或多个源设备与一个或多个目的地设备之间提供超过每秒10吉比特的数据传输速度的系统和方法。 根据一个实施例，本发明的系统包括第一和第二媒体访问控制（MAC）接口，以便于在相关联的一组物理接口上接收和传输分组。 该系统还考虑了耦合到MAC接口和相关联的第一和第二存储器结构的第一和第二现场可编程门阵列（FPGA），第一和第二FPGA被配置为执行从第一和第二MAC接口接收的分组的初始处理 并且调度分组到第一和第二MAC接口的传输以传输到一个或多个目的地设备。 第一和第二FPGA进一步操作以分派和从第一和第二存储器结构检索数据包。 耦合到第一和第二存储器结构和背板的第三FPGA可操作以从第一和第二存储器结构检索和分配分组，计算分组的适当目的地并组织用于传输的分组。 第三个FPGA进一步操作以从背板接收和分发分组。

公开(公告)号：US09378005B2

公开(公告)日：2016-06-28

申请号：US13862160

申请日：2013-04-12

申请人： Foundry Networks, LLC

发明人： Rajiv Ramanathan ,  Ron Talmor ,  Shao-Kong Kao ,  Anthony Ho ,  Rudramahesh Rugge

IPC分类号： G06F9/44 ,  G06F9/445

CPC分类号： G06F8/61 ,  G06F8/65 ,  G06F9/4401

摘要： Disclosed is a technique for facilitating software upgrade for a switching system comprising a first management processor and a second management processor and a set of one or more line processors, the techniques comprising receiving a signal to perform a software upgrade for a line processor from the set of line processors, and performing a software upgrade for the line processor without substantially affecting packet switching performed by the switching system.

公开(公告)号：US09112780B2

公开(公告)日：2015-08-18

申请号：US13766330

申请日：2013-02-13

申请人： Foundry Networks, LLC

发明人： Yuen Wong ,  Pedman Moobed

IPC分类号： H04L12/26 ,  H04L12/24

CPC分类号： H04L43/0823 ,  H04L41/0631

摘要： Techniques that assist in processing of failure detection protocol (FDP) packets. Techniques are provided that assist a CPU of a network device in processing incoming FDP packets. In one embodiment, only a subset of FDP packets received by the network device is forwarded to the CPU for processing, the other FDP packets are dropped and not forwarded to the CPU. In this manner, the amount of processing that a CPU of the network device has to perform for incoming FDP packets is reduced. This enables the network device to support newer FDPs with shorter periodic interval requirements.

公开(公告)号：US08989202B2

公开(公告)日：2015-03-24

申请号：US13398725

申请日：2012-02-16

申请人： Ian Edward Davis ,  Aris Wong

发明人： Ian Edward Davis ,  Aris Wong

IPC分类号： H04L12/28 ,  H04L12/66 ,  H04L12/933

CPC分类号： H04L49/1546

摘要： A switching device comprising one or more processors coupled to a media access control (MAC) interface and a memory structure for switching packets rapidly between one or more source devices and one or more destination devices. Packets are pipelined through a series of first processing segments to perform a plurality of first sub-operations involving the initial processing of packets received from source devices to be buffered in the memory structure. Packets are pipelined through a series of second processing segments to perform a plurality of second sub-operations involved in retrieving packets from the memory structure and preparing packets for transmission. Packets are pipelined through a series of third processing segments to perform a plurality of third sub-operations involved in scheduling transmission of packets to the MAC interface for transmission to one or more destination devices.

摘要翻译： 一种交换设备，包括耦合到媒体访问控制（MAC）接口的一个或多个处理器和用于在一个或多个源设备与一个或多个目的地设备之间快速切换分组的存储器结构。 数据包通过一系列第一处理段进行流水线处理，以执行多个第一子操作，其涉及从源设备接收到的数据包的初始处理，以缓冲在存储器结构中。 分组通过一系列第二处理段流水线地执行涉及从存储器结构检索分组并准备分组以进行传输的多个第二子操作。 分组通过一系列第三处理段流水线地执行多个第三子操作，所述第三子操作涉及调度到MAC接口的分组传输以传输到一个或多个目的地设备。

公开(公告)号：US08918875B2

公开(公告)日：2014-12-23

申请号：US13184748

申请日：2011-07-18

申请人： Philip Kwan

发明人： Philip Kwan

IPC分类号： G06F11/00 ,  H04L29/06 ,  H04L29/12

CPC分类号： H04L63/1408 ,  H04L61/103 ,  H04L63/0236 ,  H04L63/101 ,  H04L63/1466

摘要： A system and method that provides for copying ARP replies, and generating data packets which include the ARP reply, and other information such as an identification of the port on the ARP reply was received. These data packets are then transmitted to an ARP collector which stores the ARP reply and port information. The ARP collector then uses this stored information, and analyzes future data packets relative to the stored information to detect occurrences of ARP spoofing. The ARP collector further provides for generating alerts and taking security actions when ARP reply spoofing is detected.

摘要翻译： 接收到一种系统和方法，用于复制ARP应答，生成包含ARP应答的数据包，以及其他信息，如ARP应答端口的标识。 然后将这些数据包发送到存储ARP应答和端口信息的ARP收集器。 ARP收集器然后使用这个存储的信息，并分析与存储的信息相关的未来数据包，以检测ARP欺骗的发生。 ARP收发器进一步提供在检测到ARP回复欺骗时产生警报并采取安全措施。

公开(公告)号：US08817666B2

公开(公告)日：2014-08-26

申请号：US12939115

申请日：2010-11-03

申请人： Rajiv Ramanathan ,  Jordi Moncada-Elias

发明人： Rajiv Ramanathan ,  Jordi Moncada-Elias

IPC分类号： H04L12/28 ,  H04L12/56 ,  H04L12/44 ,  H04L12/46

CPC分类号： H04L45/18 ,  H04L12/44 ,  H04L12/4625 ,  H04L12/4641 ,  H04L12/467 ,  H04L45/48

摘要： A system and method that modifies the behavior of the IEEE 802.1D STP standard to thereby decouple the one data domain from the one control domain involves managing multiple spanning tree protocol (STP) instances in a virtual local area network (VLAN). The method includes the step of assigning a unique set of ports within the VLAN to each of the multiple STP instances. Then, each of the multiple STP instances are managed to keep each of the multiple STP instances separate. Finally, when a topology change is detected in one of the multiple STP instances, entries that have been learned on the unique set of ports assigned to the STP protocol instance where the topology change is detected are fast-aged or transitioned from one state to another.

摘要翻译： 修改IEEE 802.1D STP标准的行为从而使一个数据域与一个控制域分离的系统和方法涉及管理虚拟局域网（VLAN）中的多个生成树协议（STP）实例。 该方法包括将VLAN内的一组唯一的端口分配给多个STP实例的步骤。 然后，管理多个STP实例中的每一个，以保持每个多个STP实例分离。 最后，当在多个STP实例之一中检测到拓扑变化时，已经在分配给STP协议实例的唯一一组端口上学习到的拓扑变化被检测到的条目被快速老化或从一个状态转换到另一个状态 。

公开(公告)号：US08811171B2

公开(公告)日：2014-08-19

申请号：US13944876

申请日：2013-07-17

申请人： Foundry Networks, LLC

发明人： Nitin Jain

IPC分类号： H04L12/28 ,  H04L12/46 ,  H04L12/56

CPC分类号： H04L47/12 ,  H04L12/2852 ,  H04L12/4675 ,  H04L47/10 ,  H04L47/11 ,  H04L47/2433 ,  H04L47/266

摘要： Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control at the MAC layer. Additionally, the tagged pause frames can be forwarded over multiple hops on Local Area Networks across a Metropolitan Area Network or Wide Area Network.

摘要翻译： 提供的解决方案允许网络设备在考虑到流量帧的优先级的情况下对MAC层应用流量控制。 这可以通过生成指示业务流应该被暂停，同时利用新的操作码值，或者通过利用新的类型/长度值（可能与新的操作码值组合）来实现。 然后，接收设备可以检查帧的字段以确定它是否应该使用基于优先级的暂停，然后检查其他字段以确定要暂停的优先级等级以及多长时间。 这样可以提高MAC层的流量控制效率。 此外，标记的暂停帧可以通过城域网或广域网在局域网上的多跳进行转发。

公开(公告)号：US08782182B2

公开(公告)日：2014-07-15

申请号：US11970460

申请日：2008-01-07

申请人： Animesh Chaturvedi ,  Manan Shah ,  Marc Lavine ,  Ron Lau

发明人： Animesh Chaturvedi ,  Manan Shah ,  Marc Lavine ,  Ron Lau

IPC分类号： G06F15/177

CPC分类号： H04L41/0853 ,  H04L41/0266 ,  H04L41/0813

摘要： An approach to generating device-specific configurations is described. In one approach, a method of generating a device-specific configuration for a target device is described. The method involves receiving a configuration parameter, and receiving command syntax information. A state description is generated from the configuration parameter, with reference to a configuration library. Device information is retrieved from the target device, and the device-specific configuration is generated with reference to the command syntax information, the device information, the state description, and a command library.

摘要翻译： 描述了生成设备特定配置的方法。 在一种方法中，描述了为目标设备生成特定于设备的配置的方法。 该方法包括接收配置参数，以及接收命令语法信息。 参考配置库，从配置参数生成状态描述。 从目标设备检索设备信息，并参考命令语法信息，设备信息，状态描述和命令库生成设备特定配置。

公开(公告)号：US20140187241A1

公开(公告)日：2014-07-03

申请号：US14202296

申请日：2014-03-10

申请人： Foundry Networks, LLC

发明人： Vishal Sinha

IPC分类号： H04W8/14

CPC分类号： H04W8/14 ,  H04W8/02 ,  H04W8/065 ,  H04W8/087 ,  H04W80/04 ,  H04W84/12

摘要： Wireless roaming in a computer network may be handled through a solution provided on one or more switches in the network. A roam request sent by a switch corresponding to the user's new location may be received by the other switches in the network. If the user is known to any of these switches, then they may execute steps to accommodate the roaming. The tasks performed may vary based on whether the roaming is on layer 2 or layer 3, whether the switch is a home agent for the client, and/or whether the switch already corresponds to the user's new location.

摘要翻译： 可以通过在网络中的一个或多个交换机上提供的解决方案来处理计算机网络中的无线漫游。 由与用户新位置相对应的交换机发送的漫游请求可以由网络中的其他交换机接收。 如果用户对这些交换机中的任何一个都是已知的，则它们可以执行步骤来适应漫游。 执行的任务可以基于漫游在层2或层3上，交换机是否是客户端的归属代理以及/或交换机是否已经对应于用户的新位置而变化。

公开(公告)号：US08671219B2

公开(公告)日：2014-03-11

申请号：US11745008

申请日：2007-05-07

申请人： Ian Edward Davis

发明人： Ian Edward Davis

IPC分类号： G06F15/173 ,  H04J1/16

CPC分类号： H04L47/10 ,  H04L12/4645 ,  H04L47/2408 ,  H04L47/2433 ,  H04L47/2458

摘要： According to an embodiment of the invention, a network device such as a router or switch provides efficient data packet handling capability. The network device includes one or more input ports for receiving data packets to be routed, as well as one or more output ports for transmitting data packets. The network device includes an integrated port controller integrated circuit for routing packets. The integrated circuit includes an interface circuit, a received packets circuit, a buffer manager circuit for receiving data packets from the received packets circuit and transmitting data packets in one or more buffers and reading data packets from the one or more buffers. The integrated circuit also includes a rate shaper counter for storing credit for a traffic class, so that the integrated circuit can support input and/or output rate shaping. The integrated circuit may be associated with an IRAM, a CAM, a parameter memory configured to hold routing and/or switching parameters, which may be implemented as a PRAM, and an aging RAM, which stores aging information. The aging information may be used by a CPU coupled to the integrated circuit via a system interface circuit to remove entries from the CAM and/or the PRAM when an age count exceeds an age limit threshold for the entries.

摘要翻译： 根据本发明的实施例，诸如路由器或交换机之类的网络设备提供有效的数据分组处理能力。 网络设备包括用于接收要路由的数据分组的一个或多个输入端口以及用于传输数据分组的一个或多个输出端口。 网络设备包括用于路由分组的集成端口控制器集成电路。 集成电路包括接口电路，接收分组电路，用于从接收到的分组电路接收数据分组并在一个或多个缓冲器中发送数据分组并从一个或多个缓冲器读取数据分组的缓冲器管理器电路。 集成电路还包括用于存储业务等级的信用的速率整形计数器，使得集成电路可以支持输入和/或输出速率整形。 集成电路可以与IRAM，CAM，被配置为保存可被实现为PRAM的路由和/或切换参数的参数存储器以及存储老化信息的老化RAM相关联。 老化信息可以由耦合到集成电路的CPU通过系统接口电路使用，以在年龄计数超过条目的年龄限制阈值时从CAM和/或PRAM中移除条目。