Logical bridging system and method
    1.
    发明授权
    Logical bridging system and method 有权
    逻辑桥接系统和方法

    公开(公告)号:US07796594B2

    公开(公告)日:2010-09-14

    申请号:US12030822

    申请日:2008-02-13

    IPC分类号: H04L12/28

    摘要: A system and method of extending a standard bridge to enable execution of logical bridging functionality are disclosed. In some implementations, a logical bridge may assign source logical port information to a data packet based on characteristics of the data packet, employ the source logical port information to learn the source address and to forward the data packet to a logical egress port, and map the logical egress port to a physical egress port at which the data packet is to be egressed. A tunnel interface may optionally be applied to a data packet upon egress.

    摘要翻译: 公开了一种扩展标准网桥以实现逻辑桥接功能的执行的系统和方法。 在一些实现中,逻辑桥可以基于数据分组的特性将源逻辑端口信息分配给数据分组,使用源逻辑端口信息来学习源地址并将数据分组转发到逻辑出口端口,并且映射 到出口数据包的物理出口端口的逻辑出口端口。 隧道接口可以可选地在出口时应用于数据分组。

    Packet forwarding apparatus and method
    2.
    发明授权
    Packet forwarding apparatus and method 有权
    分组转发装置和方法

    公开(公告)号:US08089963B2

    公开(公告)日:2012-01-03

    申请号:US12881123

    申请日:2010-09-13

    IPC分类号: H04L12/28

    摘要: A network device includes at least one source physical port coupled to a network, and a plurality of egress ports. A logical port assignment mechanism assigns source logical port information to a data packet received via one of the at least one physical port. The source logical port information is based on characteristics of the data packet, and the source logical port information corresponds to a logical entity that is different from any source physical port. A forwarding engine determines one or more egress ports for forwarding the data packet based on at least the assigned source logical port.

    摘要翻译: 网络设备包括耦合到网络的至少一个源物理端口和多个出口端口。 逻辑端口分配机制将源逻辑端口信息分配给经由至少一个物理端口之一接收的数据分组。 源逻辑端口信息基于数据包的特性,源逻辑端口信息对应于与任何源物理端口不同的逻辑实体。 转发引擎基于至少所分配的源逻辑端口来确定用于转发数据分组的一个或多个出口端口。

    Packet forwarding apparatus and method
    3.
    发明授权
    Packet forwarding apparatus and method 有权
    分组转发装置和方法

    公开(公告)号:US08660120B2

    公开(公告)日:2014-02-25

    申请号:US13340393

    申请日:2011-12-29

    IPC分类号: H04L12/28

    摘要: A network device includes at least one source physical port configured to be coupled to a network, a plurality of egress ports, and a packet processor. The packet processor includes a processing stage configured to implement a logical port assignment mechanism to assign source logical port information to a data packet received via one of the at least one source physical port, wherein the source logical port information is based on characteristics of the data packet, wherein the source logical port information corresponds to a logical entity that is different from any source physical port, and a forwarding engine to determine one or more egress ports for forwarding the data packet based on at least the assigned source logical port information.

    摘要翻译: 网络设备包括被配置为耦合到网络,多个出口端口和分组处理器的至少一个源物理端口。 分组处理器包括处理级,其被配置为实现逻辑端口分配机制以将源逻辑端口信息分配给经由至少一个源物理端口之一接收的数据分组,其中源逻辑端口信息基于数据的特性 分组,其中所述源逻辑端口信息对应于不同于任何源物理端口的逻辑实体,以及转发引擎,用于基于至少所分配的源逻辑端口信息来确定用于转发所述数据分组的一个或多个出口。

    PACKET FORWARDING APPARATUS AND METHOD
    4.
    发明申请
    PACKET FORWARDING APPARATUS AND METHOD 有权
    分组装置和方法

    公开(公告)号:US20120106553A1

    公开(公告)日:2012-05-03

    申请号:US13340393

    申请日:2011-12-29

    IPC分类号: H04L12/56

    摘要: A network device includes at least one source physical port configured to be coupled to a network, a plurality of egress ports, and a packet processor. The packet processor includes a processing stage configured to implement a logical port assignment mechanism to assign source logical port information to a data packet received via one of the at least one source physical port, wherein the source logical port information is based on characteristics of the data packet, wherein the source logical port information corresponds to a logical entity that is different from any source physical port, and a forwarding engine to determine one or more egress ports for forwarding the data packet based on at least the assigned source logical port information.

    摘要翻译: 网络设备包括被配置为耦合到网络,多个出口端口和分组处理器的至少一个源物理端口。 分组处理器包括处理级,其被配置为实现逻辑端口分配机制以将源逻辑端口信息分配给经由至少一个源物理端口之一接收的数据分组,其中源逻辑端口信息基于数据的特性 分组,其中所述源逻辑端口信息对应于不同于任何源物理端口的逻辑实体,以及转发引擎,用于基于至少所分配的源逻辑端口信息来确定用于转发所述数据分组的一个或多个出口。

    Packet forwarding apparatus and method
    5.
    发明申请
    Packet forwarding apparatus and method 有权
    分组转发装置和方法

    公开(公告)号:US20110007744A1

    公开(公告)日:2011-01-13

    申请号:US12881123

    申请日:2010-09-13

    IPC分类号: H04L12/56

    摘要: A network device includes at least one source physical port coupled to a network, and a plurality of egress ports. A logical port assignment mechanism assigns source logical port information to a data packet received via one of the at least one physical port. The source logical port information is based on characteristics of the data packet, and the source logical port information corresponds to a logical entity that is different from any source physical port. A forwarding engine determines one or more egress ports for forwarding the data packet based on at least the assigned source logical port.

    摘要翻译: 网络设备包括耦合到网络的至少一个源物理端口和多个出口端口。 逻辑端口分配机制将源逻辑端口信息分配给经由至少一个物理端口之一接收的数据分组。 源逻辑端口信息基于数据包的特性,源逻辑端口信息对应于与任何源物理端口不同的逻辑实体。 转发引擎基于至少所分配的源逻辑端口来确定用于转发数据分组的一个或多个出口端口。

    Implementation of reliable synchronization of distributed databases
    6.
    发明授权
    Implementation of reliable synchronization of distributed databases 有权
    实现分布式数据库的可靠同步

    公开(公告)号:US08160080B1

    公开(公告)日:2012-04-17

    申请号:US11430592

    申请日:2006-05-08

    IPC分类号: H04L12/56

    CPC分类号: H04L47/33 H04L45/028

    摘要: A method of controlling a plurality of forwarding databases provided in an Ethernet bridge having a plurality of devices. The method includes aging a first set of entries in a first forwarding database maintained by a first one of the plurality of devices. The first set of entries are owned by the first one of the plurality of devices. The method also includes transmitting one or more new address messages from the first one of the plurality of devices to a second one of the plurality of devices. The method further includes aging a second set of entries in the first forwarding database. The second set of entries are owned by the second one of the plurality of devices.

    摘要翻译: 一种控制在具有多个设备的以太网桥中提供的多个转发数据库的方法。 该方法包括老化由多个设备中的第一个维护的第一转发数据库中的第一组条目。 第一组条目由多个设备中的第一组所拥有。 该方法还包括从多个设备中的第一个设备向多个设备中的第二设备发送一个或多个新地址消息。 该方法还包括在第一转发数据库中老化第二组条目。 所述第二组条目由所述多个设备中的第二组所拥有。

    Implementation of reliable synchronization of distributed databases
    7.
    发明授权
    Implementation of reliable synchronization of distributed databases 有权
    实现分布式数据库的可靠同步

    公开(公告)号:US09019970B1

    公开(公告)日:2015-04-28

    申请号:US13443699

    申请日:2012-04-10

    IPC分类号: H04L12/56 H04L12/801

    CPC分类号: H04L47/33 H04L45/028

    摘要: A plurality of forwarding devices are configured to couple to respective pluralities of ports to ingress and egress network traffic. Ones of the plurality of forwarding devices are coupled to respective forwarding databases and each one forwarding device is configured to maintain the respective forwarding database, and send messages to and receive message from other ones of the plurality of forwarding devices to synchronize the plurality of forwarding databases.

    摘要翻译: 多个转发设备被配置为耦合到相应的多个端口以入口和出口网络业务。 所述多个转发装置的一部分被耦合到相应的转发数据库,​​并且每个转发装置被配置为维护相应的转发数据库,​​并且向多个转发装置中的其他转发装置的消息发送消息并从其接收消息以使多个转发数据库同步 。

    Secure automatic learning in ethernet bridges
    8.
    发明授权
    Secure automatic learning in ethernet bridges 有权
    在以太网桥上安全自动学习

    公开(公告)号:US07796590B1

    公开(公告)日:2010-09-14

    申请号:US11346089

    申请日:2006-02-01

    IPC分类号: H04L12/54

    摘要: A method of managing network traffic. The method includes initializing a database in communication with a network device. The database includes a number of MAC address entries and a network flooding entry associated with each of the number of MAC address entries. Each of the number of MAC address entries is associated with a station known to the network. The method also includes receiving network traffic at the network device. The network traffic is associated with a MAC source address. The method further includes determining whether the MAC source address is included in the database, automatically learning a location associated with the MAC source address, and forwarding the network traffic over the network if the MAC source address is included in the database. Additionally, the method includes dropping or trapping the network traffic if the MAC source address is not included in the database. Dropping the network traffic is performed without interaction with a CPU.

    摘要翻译: 一种管理网络流量的方法。 该方法包括初始化与网络设备通信的数据库。 数据库包括多个MAC地址表项和与每个MAC地址表项相关联的网络洪泛条目。 MAC地址表项中的每一个与网络已知的站相关联。 该方法还包括在网络设备处接收网络流量。 网络流量与MAC源地址相关联。 该方法还包括:如果MAC源地址包括在数据库中,则确定MAC源地址是否包括在数据库中,自动学习与MAC源地址相关联的位置,以及如果MAC源地址被包括在网络中,则转发网络流量。 此外,如果MAC源地址不包括在数据库中,则该方法包括丢弃或捕获网络流量。 执行网络流量下降而不与CPU进行交互。

    Preventing denial-of-service attacks employing broadcast packets
    9.
    发明授权
    Preventing denial-of-service attacks employing broadcast packets 有权
    使用广播数据包防止拒绝服务攻击

    公开(公告)号:US08830997B1

    公开(公告)日:2014-09-09

    申请号:US12917417

    申请日:2010-11-01

    IPC分类号: H04L12/28

    摘要: A network device including a processor having an internet protocol (IP) address, and a processor port configured to communicate exclusively with the processor. The network device also includes a plurality of network ports configured to communicate with network nodes external to the network device. In addition, the network device includes a forwarding engine configured to selectively transfer packets (i) among the plurality of network ports, and (ii) between the processor port and the plurality of network ports; receive a broadcast packet from one of the plurality of network ports, the broadcast packet including a target IP address; and forward the broadcast packet to the processor, via the processor port, only when both (i) the broadcast packet is a control packet, and (ii) the target IP address of the broadcast packet matches the IP address of processor.

    摘要翻译: 一种网络设备,包括具有互联网协议(IP)地址的处理器和被配置为与处理器专用通信的处理器端口。 网络设备还包括被配置为与网络设备外部的网络节点进行通信的多个网络端口。 另外,网络设备包括:转发引擎,被配置为选择性地传送多个网络端口中的分组(i),以及(ii)处理器端口和多个网络端口之间; 从所述多个网络端口之一接收广播分组,所述广播分组包括目标IP地址; 并且只有当(i)广播分组都是控制分组时,并且(ii)广播分组的目标IP地址与处理器的IP地址匹配,则经由处理器端口将广播分组转发到处理器。

    Preventing denial-of-service attacks employing broadcast packets
    10.
    发明授权
    Preventing denial-of-service attacks employing broadcast packets 有权
    使用广播数据包防止拒绝服务攻击

    公开(公告)号:US07826447B1

    公开(公告)日:2010-11-02

    申请号:US11196961

    申请日:2005-08-04

    IPC分类号: H04L12/28 H04L12/56

    摘要: An apparatus having a corresponding method and computer program comprises a processor; a plurality of ports to transmit and receive packets of data, the plurality of ports comprising a processor port in communication with the processor, the packets comprising broadcast packets and multicast packets; a memory to store a table that associates the processor port with one or more Internet protocol (IP) addresses; and a forwarding engine to transfer the packets between the ports, to transfer each of the broadcast packets to the processor port only when the table associates a target IP address of the broadcast packet with the processor port, and to transfer each of the multicast packets to the processor port only when the table associates a target IP address of the multicast packet with the processor port.

    摘要翻译: 具有相应方法和计算机程序的装置包括处理器; 用于发送和接收数据分组的多个端口,所述多个端口包括与所述处理器通信的处理器端口,所述分组包括广播分组和多播分组; 用于存储将处理器端口与一个或多个因特网协议(IP)地址相关联的表的存储器; 以及转发引擎,用于在端口之间传送分组,仅当该表将广播分组的目标IP地址与处理器端口相关联时将每个广播分组传送到处理器端口,并将每个多播分组传送到 处理器端口只有当表将组播数据包的目标IP地址与处理器端口相关联时,