公开(公告)号：US20220166860A1

公开(公告)日：2022-05-26

申请号：US17671188

申请日：2022-02-14

申请人： Cisco Technology, Inc.

发明人： Patrice Brissette ,  Clarence Filsfils ,  Darren Dukes ,  Gaurav Dawra ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L69/22 ,  H04L69/324 ,  H04L45/00 ,  H04L67/10 ,  H04L45/50 ,  H04L12/46 ,  H04L45/74 ,  H04L61/5007 ,  H04L49/35 ,  H04L67/63 ,  H04L45/741

摘要： In one embodiment, Ethernet Virtual Private Network (EVPN) is implemented using Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) underlay network and SRv6-enhanced Border Gateway Protocol (BGP) signaling. A particular route associated with a particular Internet Protocol Version 6 (IPv6) Segment Routing (SRv6) Segment Identifier (SID) is advertised in a particular route advertisement message of a routing protocol (e.g., BGP). The SID includes encoding representing a particular Ethernet Virtual Private Network (EVPN) Layer 2 (L2) flooding Segment Routing end function of the particular router and a particular Ethernet Segment Identifier (ESI), with the particular SID including a routable prefix to the particular router. The particular router receives a particular packet including the particular SID; and in response, the particular router performs the particular EVPN end function on the particular packet.

公开(公告)号：US11165699B2

公开(公告)日：2021-11-02

申请号：US16684006

申请日：2019-11-14

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Pablo Camarillo Garvia

IPC分类号： H04L12/741 ,  H04L12/26 ,  H04L12/751 ,  H04L29/06

摘要： The present disclosure provides a packet tracing mechanism will be described that provides packet tracing information to a mobile network controller. In one aspect, a method includes receiving a data packet sent from a source node to a destination node; determining if the data packet is to be updated with packet tracing information; and upon determining that the data packet is to be updated, updating the packet tracing information of the data packet to include identification of the network device and an ingress timestamp of the data packet at the network device for a corresponding network controller to determining network routing policies.

公开(公告)号：US11019075B2

公开(公告)日：2021-05-25

申请号：US16019125

申请日：2018-06-26

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Pablo Camarillo Garvia ,  Francois Clad

IPC分类号： H04L29/06 ,  H04L9/06 ,  H04L12/743 ,  H04L12/801

摘要： In one embodiment, a Segment Routing network node provides processing and network efficiencies in protecting Internet Protocol version 6 (IPv6) Segment Routing (SRv6) packets and functions using Security Segment Identifiers, which are included in Segment Lists of a Segment Routing Header of a SRv6 packet. The Security Segment Identifier provides, inter alia, origin authentication, integrity of information in one or more headers of the packet, and/or anti-replay protection. In one embodiment, a Security Segment Identifier includes a value determined based on a secured portion of the packet. A typically secured portion includes the Source and Destination Addresses, one or more Segment Identifiers in a Segment List and the Segments Left value. In one embodiment, the Destination Address and/or a Segment Identifier in the Segment List includes and an anti-replay value (e.g., sequence number or portion thereof) which is also in the secured portion of the packet.

公开(公告)号：US10924518B2

公开(公告)日：2021-02-16

申请号：US16118554

申请日：2018-08-31

申请人： Cisco Technology, Inc.

发明人： Aeneas Sean Dodd-Noble ,  Irfan Ali ,  Pablo Camarillo Garvia ,  Om Prakash Suthar ,  Ravi Kiran Guntupalli ,  Arun C. Alex

IPC分类号： G06F15/16 ,  H04L29/06 ,  H04L12/46 ,  H04L29/08

摘要： Various implementations disclosed herein enable programming user plane gateway controllers over enhanced N9 interfaces. In various implementations, a method of gateway controlling is performed by a computing device including one or more processors, and a non-transitory memory. In various implementations the method includes determining, by a first packet gateway controller connected to a first session manager device, that a user equipment moved to a geographical area that is served by a second session manager device. In some implementations, the method includes receiving, by the first packet gateway device, a set of information for a second packet gateway device. In some implementations, the method includes transmitting, by the first packet gateway device, a session establishment request via a first network interface to the second packet gateway controller using segment routing via a second network interface.

公开(公告)号：US10757231B2

公开(公告)日：2020-08-25

申请号：US15981232

申请日：2018-05-16

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L12/721 ,  H04L12/46 ,  H04L12/741 ,  H04L29/12 ,  H04L12/931 ,  H04L12/749 ,  H04L12/26

摘要： In one embodiment, a third-party client network access device sends Internet Protocol (IP) encapsulating packets with a predetermined destination address of a node of the network client service provider (NCSP), with these IP encapsulating packets encapsulating original data packets. These IP encapsulating packets are communicated through the ISP network being used by the NCSP in providing its network services. The predetermined destination address, which is typically also a segment identifier, causes network service processing (e.g., according to a corresponding segment routing function) of the received packet by the node of the NCSP. This processing typically includes creating a segment routing packet encapsulating the original packet (extracted from the received IP encapsulating packet) with its segment list(s) being populated with segment identifier(s) according to a current NCSP segment routing policy reflective of a sequence of forwarding and service chaining operations of the NCSP service offering.

公开(公告)号：US20190394211A1

公开(公告)日：2019-12-26

申请号：US16019125

申请日：2018-06-26

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Pablo Camarillo Garvia ,  Francois Clad

IPC分类号： H04L29/06 ,  H04L9/06 ,  H04L12/743 ,  H04L12/801

摘要： In one embodiment, a Segment Routing network node provides processing and network efficiencies in protecting Internet Protocol version 6 (IPv6) Segment Routing (SRv6) packets and functions using Security Segment Identifiers, which are included in Segment Lists of a Segment Routing Header of a SRv6 packet. The Security SegmentIdentifier provides, inter alia, origin authentication, integrity of information in one or more headers of the packet, and/or anti-replay protection. In one embodiment, a Security Segment Identifier includes a value determined based on a secured portion of the packet. A typically secured portion includes the Source and Destination Addresses, one or more Segment Identifiers in a Segment List and the Segments Left value. In one embodiment, the Destination Address and/or a Segment Identifier in the Segment List includes and an anti-replay value (e.g., sequence number or portion thereof) which is also in the secured portion of the packet.

公开(公告)号：US20190288941A1

公开(公告)日：2019-09-19

申请号：US15922894

申请日：2018-03-15

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L12/741 ,  H04L29/06

摘要： In one embodiment, segment routing network processing of packets is performed, including using segment routing packet policies and functions providing segment routing processing signaling and packet forwarding efficiencies in a network. A segment routing node signals to another segment routing node using a signaled segment identifier in a segment list of a segment routing packet with the segments left identifying a segment list element above the signaled segment identifier. A downstream segment routing node receives the segment routing packet, obtains this signaled segment identifier, and performs processing of one or more packets based thereon. In one embodiment, a provider edge node replaces its own segment identifier in a received customer packet, with a downstream customer node using the replaced (signaling) segment identifier (of a provider edge node/segment routing function) for accessing a return path through the provider network.

公开(公告)号：US20190288873A1

公开(公告)日：2019-09-19

申请号：US15925731

申请日：2018-03-19

申请人： Cisco Technology, Inc.

发明人： Pablo Camarillo Garvia ,  Hendrikus G. P. Bosch ,  Clarence Filsfils

IPC分类号： H04L12/46 ,  H04L12/741

摘要： In one embodiment, a segment routing and tunnel exchange provides packet forwarding efficiencies in a network, including providing an exchange between a segment routing domain and a packet tunnel domain. One application includes the segment routing and tunnel exchange interfacing segment routing packet forwarding (e.g., in a Evolved Packet Core (EPC) and/or 5-G user plane) and packet tunnel forwarding in access networks (e.g., replacing a portion of a tunnel between an access node and a user plane function for accessing a corresponding data network). In one embodiment, a network provides mobility services using a segment routing data plane that spans segment routing and tunnel exchange(s) and segment routing-enabled user plane functions. One embodiment uses the segment routing data plane without any modification to a (radio) access network (R)AN (e.g., Evolved NodeB, Next Generation NodeB) nor to user equipment (e.g., any end user device).

公开(公告)号：US20180375764A1

公开(公告)日：2018-12-27

申请号：US15981232

申请日：2018-05-16

申请人： Cisco Technology, Inc.

发明人： Clarence Filsfils ,  Francois Clad ,  Pablo Camarillo Garvia

IPC分类号： H04L12/741 ,  H04L12/46 ,  H04L29/12

摘要： In one embodiment, a third-party client network access device sends Internet Protocol (IP) encapsulating packets with a predetermined destination address of a node of the network client service provider (NCSP), with these IP encapsulating packets encapsulating original data packets. These IP encapsulating packets are communicated through the ISP network being used by the NCSP in providing its network services. The predetermined destination address, which is typically also a segment identifier, causes network service processing (e.g., according to a corresponding segment routing function) of the received packet by the node of the NCSP. This processing typically includes creating a segment routing packet encapsulating the original packet (extracted from the received IP encapsulating packet) with its segment list(s) being populated with segment identifier(s) according to a current NCSP segment routing policy reflective of a sequence of forwarding and service chaining operations of the NCSP service offering.