公开(公告)号：US12003348B2

公开(公告)日：2024-06-04

申请号：US17649955

申请日：2022-02-04

Applicant: Cisco Technology, Inc.

Inventor： Anand Oswal ,  Muninder S. Sambi ,  Sanjay K. Hooda ,  Gangadharan Byju Pularikkal ,  Kedar Karmarkar

IPC: H04L12/46 ,  H04L12/18 ,  H04L61/5014 ,  H04L61/58 ,  H04L101/668

CPC classification number: H04L12/4679 ,  H04L12/1886 ,  H04L12/4633 ,  H04L61/5014 ,  H04L61/58 ,  H04L2101/668 ,  H04L2212/00

Abstract: Secure network segmentation using logical subnet segments is described. A single network segment or subnet provided by a third party is mapped into multiple layer-3 virtual or logical segments without requiring separate subnets. This mapping is accomplished by using virtual routing functions (VRFs) per logical subnet segment while retaining a single subnet across the segments. The logical subnet segments interact with the single network segment provided by the third party (ISP). The layer-3 VRF instances are created without the need for separate IP subnet pools per layer-3 segment. Each VRF instance for the various logical subnet segments is mapped to an identifier and tag.

公开(公告)号：US11277282B2

公开(公告)日：2022-03-15

申请号：US16746903

申请日：2020-01-19

Applicant: Cisco Technology, Inc.

Inventor： Anand Oswal ,  Muninder S. Sambi ,  Sanjay K. Hooda ,  Gangadharan Byju Pularikkal ,  Kedar Karmarkar

IPC: H04L12/46 ,  H04L12/18 ,  H04L61/5014 ,  H04L61/58 ,  H04L101/668

Abstract: Secure network segmentation using logical subnet segments is described. A single network segment or subnet provided by a third party is mapped into multiple layer-3 virtual or logical segments without requiring separate subnets. This mapping is accomplished by using virtual routing functions (VRFs) per logical subnet segment while retaining a single subnet across the segments. The logical subnet segments interact with the single network segment provided by the third party (ISP). The layer-3 VRF instances are created without the need for separate IP subnet pools per layer-3 segment. Each VRF instance for the various logical subnet segments is mapped to a Virtual Network Identifier (VNI) and Scalable Group Tag (SGT).