-
公开(公告)号：US20240007353A1
公开(公告)日：2024-01-04
申请号：US18360451
申请日：2023-07-27
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , H04L12/46 , G06F9/455
CPC classification number: H04L41/0893 , H04L12/4641 , G06F9/45558 , H04L12/4633 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US20220191135A1
公开(公告)日：2022-06-16
申请号：US17684376
申请日：2022-03-01
Applicant: Cisco Technology, Inc.
Inventor： Satish Kondalam , Sanjay Kumar Hooda , Prakash C. Jain , Vikram Vikas Pendharkar
Abstract: Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.
-
公开(公告)号：US11102074B2
公开(公告)日：2021-08-24
申请号：US16368624
申请日：2019-03-28
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US20180367328A1
公开(公告)日：2018-12-20
申请号：US15792180
申请日：2017-10-24
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Prakash C. Jain , Rishabh Parekh , Atri Indiresan , Satish Kondalam , Victor Moreno
CPC classification number: H04L12/1886 , H04L12/1818 , H04L12/185 , H04L45/48 , H04L45/74 , H04L47/2416 , H04L61/103 , H04L61/2069 , H04L61/2084 , H04L65/1093
Abstract: A method including determining that network traffic being transmitted is unicast or multicast; mapping to which virtual network and locator address each host belongs; generating leaking data for unicast and multicast traffic, wherein the leaking data indicates that a first virtual network leaks traffic to a second virtual network; receiving a request from the second virtual network to receive traffic from a host in the first virtual network; determining, based on the leaking data and the type of traffic being transmitted, if the first virtual network leaks traffic to the second virtual network; if the first virtual network leaks traffic to the second virtual network, determining a locator address for the host in the first virtual network using the mapping data; and transmitting the locator address for the host to the second virtual network to enable traffic leaking from the host to the second virtual network is disclosed.
-
公开(公告)号：US12192057B2
公开(公告)日：2025-01-07
申请号：US18677720
申请日：2024-05-29
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , G06F9/455 , H04L12/46
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
Patent Agency Ranking
公开(公告)号：US12107734B2
公开(公告)日：2024-10-01
申请号：US18360451
申请日：2023-07-27
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , G06F9/455 , H04L12/46
CPC classification number: H04L41/0893 , G06F9/45558 , H04L12/4633 , H04L12/4641 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
公开(公告)号：US11799767B2
公开(公告)日：2023-10-24
申请号：US17684376
申请日：2022-03-01
Applicant: Cisco Technology, Inc.
Inventor： Satish Kondalam , Sanjay Kumar Hooda , Prakash C. Jain , Vikram Vikas Pendharkar
Abstract: Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.
-
公开(公告)号：US11165702B1
公开(公告)日：2021-11-02
申请号：US16864442
申请日：2020-05-01
Applicant: Cisco Technology, Inc.
Inventor： Prakash C. Jain , Sanjay Kumar Hooda , Satish Kondalam , Raja Janardanan , Aaditya Vadnere , Shivangi Sharma
IPC: H04L12/28 , H04L12/747 , H04L12/741 , H04L12/801 , H04L12/715 , H04L12/813 , H04L29/06
Abstract: Systems, methods, and computer-readable media for communicating policy changes in a Locator/ID Separation Protocol (LISP) based network deployment include receiving, at a first routing device, a first notification from a map server, the first notification indicating a change in a policy for LISP based communication between at least a first endpoint device and at least a second endpoint device, the first endpoint device being connected to a network fabric through the first routing device and the second endpoint device being connected to the network fabric through a second routing device. The first routing device forwards a second notification to the second routing device if one or more entries of a first map cache implemented by the first routing device are affected by the policy change, the second notification indicating a set of one or more endpoints connected to the second routing device that are affected by the policy change.
-
公开(公告)号：US20210075767A1
公开(公告)日：2021-03-11
申请号：US16561360
申请日：2019-09-05
Applicant: Cisco Technology, Inc.
Inventor： Prakash C. Jain , Sanjay Kumar Hooda , Satish Kondalam
IPC: H04L29/06 , H04L12/715 , H04L29/12
Abstract: Systems, methods, and computer-readable media for preserving source host context when firewall policies are applied to traffic in an enterprise network fabric. A data packet to a destination host from a source host can be received at a first border node instance in an enterprise network fabric as part of network traffic. The data packet can include a context associated with the source host. Further, the data packet can be sent to a firewall of the enterprise network fabric and can be received at a second border node instance after the firewall applies a firewall policy to the data packet. The data packet can then be selectively encapsulated with the context associated with the source host at the second border node instance for applying one or more policies to control transmission of the network traffic through the enterprise network fabric.
-
公开(公告)号：US12021699B2
公开(公告)日：2024-06-25
申请号：US18304890
申请日：2023-04-21
Applicant: Cisco Technology, Inc.
Inventor： Sanjay Kumar Hooda , Muninder Singh Sambi , Victor Moreno , Prakash C. Jain , Tarunesh Ahuja , Satish Kondalam
IPC: H04L41/0893 , G06F9/455 , H04L12/46
CPC classification number: H04L41/0893 , G06F9/45558 , H04L12/4633 , H04L12/4641 , G06F2009/45587 , G06F2009/45595
Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.
-
-
-
-
-
-
-
-
-
Search Results
30
records
(took 0.017 seconds)
