公开(公告)号：US10171559B2

公开(公告)日：2019-01-01

申请号：US14549915

申请日：2014-11-21

Applicant: Cisco Technology, Inc.

Inventor： Feng Cai ,  Yuxiang Chen ,  Danmu Wu ,  Zhiyong Fang

IPC: H04L29/08 ,  H04L12/46

Abstract: A network device stores a Virtual Extensible Local Area Network (VxLAN) Tunnel Endpoint (VTEP) membership information that associates VxLANs each with a corresponding set of VTEPs authorized to originate VxLAN packets on that VxLAN. The network device receives from a communication network a VxLAN packet that identifies a VxLAN and an originating VTEP. The VTEP compares the originating VTEP to the set of VTEPs associated with the VxLAN in the VTEP membership information that matches the identified VxLAN. If the comparison indicates that the originating VTEP is not included in the set of VTEPs authorized to originate VxLAN packets, the VTEP discards the received VxLAN packet. Otherwise the VTEP further processes the VxLAN packet.

公开(公告)号：US09912598B2

公开(公告)日：2018-03-06

申请号：US15184840

申请日：2016-06-16

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Danmu Wu ,  Jianda Liu ,  Yunpeng Zhang ,  Feng Cai

IPC: H04L12/26 ,  H04L12/851 ,  H04L12/723 ,  H04L12/709

CPC classification number: H04L45/50 ,  H04L45/24

Abstract: A method is provided in one embodiment and includes receiving at a network element an encapsulated packet and determining whether both an ECMP/LAG Existing (“ele”) flag and an Entropy Label Capability (“elc”) flag are set for an egress node of the packet in a Label Distribution Protocol (“LDP”) database of the network element. If both the ele and elc flags are set for the egress node of the packet in the LDP database, the method further includes determining whether the network element is an ingress node for the packet and, if the network element is the ingress node for the packet, pushing an Entropy Label (“EL”) and an Entropy Label Indicator (“ELI”) onto an MPLS stack of the packet.

公开(公告)号：US20170366461A1

公开(公告)日：2017-12-21

申请号：US15184840

申请日：2016-06-16

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Danmu Wu ,  Jianda Liu ,  Yunpeng Zhang ,  Feng Cai

IPC: H04L12/851 ,  H04L12/723 ,  H04L12/709

CPC classification number: H04L45/50 ,  H04L45/24

Abstract: A method is provided in one embodiment and includes receiving at a network element an encapsulated packet and determining whether both an ECMP/LAG Existing (“ele”) flag and an Entropy Label Capability (“elc”) flag are set for an egress node of the packet in a Label Distribution Protocol (“LDP”) database of the network element. If both the ele and elc flags are set for the egress node of the packet in the LDP database, the method further includes determining whether the network element is an ingress node for the packet and, if the network element is the ingress node for the packet, pushing an Entropy Label (“EL”) and an Entropy Label Indicator (“ELI”) onto an MPLS stack of the packet.

公开(公告)号：US20160149808A1

公开(公告)日：2016-05-26

申请号：US14549915

申请日：2014-11-21

Applicant: Cisco Technology, Inc.

Inventor： Feng Cai ,  Yuxiang Chen ,  Danmu Wu ,  Zhiyong Fang

IPC: H04L12/741 ,  H04L12/931

CPC classification number: H04L67/10 ,  H04L12/4633

Abstract: A network device stores a Virtual Extensible Local Area Network (VxLAN) Tunnel Endpoint (VTEP) membership information that associates VxLANs each with a corresponding set of VTEPs authorized to originate VxLAN packets on that VxLAN. The network device receives from a communication network a VxLAN packet that identifies a VxLAN and an originating VTEP. The VTEP compares the originating VTEP to the set of VTEPs associated with the VxLAN in the VTEP membership information that matches the identified VxLAN. If the comparison indicates that the originating VTEP is not included in the set of VTEPs authorized to originate VxLAN packets, the VTEP discards the received VxLAN packet. Otherwise the VTEP further processes the VxLAN packet.

Abstract translation: 网络设备存储虚拟可扩展局域网（VxLAN）隧道端点（VTEP）成员身份信息，该信息将VxLANs与授权在该VxLAN上创建VxLAN数据包的对应的一组VTEP相关联。 网络设备从通信网络接收识别VxLAN和始发VTEP的VxLAN分组。 VTEP将起始VTEP与与所识别的VxLAN匹配的VTEP成员资格信息中与VxLAN相关联的VTEP集合进行比较。 如果比较表明发起VTEP不包含在授权发起VxLAN数据包的VTEP集合中，则VTEP将丢弃接收的VxLAN数据包。 否则，VTEP进一步处理VxLAN数据包。