公开(公告)号：US12034638B2

公开(公告)日：2024-07-09

申请号：US17752096

申请日：2022-05-24

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L45/74 ,  H04L9/40 ,  H04L45/02 ,  H04L69/164 ,  H04L69/22

CPC classification number: H04L45/74 ,  H04L45/02 ,  H04L63/0485 ,  H04L69/164 ,  H04L69/22

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US10257102B1

公开(公告)日：2019-04-09

申请号：US15720472

申请日：2017-09-29

Applicant: Juniper Networks, Inc.

Inventor： Ajay Kachrani ,  Manish Talwar ,  Elmer Tolentino ,  Rathi Kartheek ,  Hao Wang

IPC: H04L12/823 ,  H04L1/20 ,  H04B10/40

CPC classification number: H04L47/32 ,  H04B10/40 ,  H04B10/5057 ,  H04L1/203 ,  H04L41/0659 ,  H04L43/0847 ,  H04L43/10 ,  H04Q2011/0079

Abstract: In some embodiments, an apparatus comprises an optical transponder which includes a processor, an electrical interface and an optical interface. The processor is operatively coupled to the electrical interface and the optical interface. The optical interface is configured to be operatively coupled to a plurality of optical links and the electrical interface is configured to be operatively coupled to a router such that the optical transponder is configured to be operatively coupled between the plurality of optical links and the router. The processor is configured to perform pre-forward error correction (FEC) bit error rate (BER) detection to identify a degradation of an optical link from the plurality of optical links. The processor is configured to make modifications to packets designated to be transmitted via the optical link in response to the degradation being identified such that the router is notified of the degradation of the optical link.

公开(公告)号：US20220286394A1

公开(公告)日：2022-09-08

申请号：US17752096

申请日：2022-05-24

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L45/74 ,  H04L45/02 ,  H04L9/40 ,  H04L69/164 ,  H04L69/22

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US20220103551A1

公开(公告)日：2022-03-31

申请号：US17038222

申请日：2020-09-30

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L29/06 ,  H04L29/12 ,  H04L12/26 ,  H04L12/24 ,  H04L12/707

Abstract: Embodiments improve error detection and recovery in media access control security sessions. A MACsec session is torn down after three liveness time intervals elapse without receiving a MACsec key exchange protocol data unit (MKPDU) from a remote peer. This delay between a cessation of effective network communication over the MACsec session and the expiration of the three “liveness” intervals results in increased packet loss and an increased network convergence time as a network continues to route/forward data over the MACsec session for a period of time after the MACsec session has entered secure block mode. To solve this problem, embodiments define a new alarm, called a MACsec link alert, which is raised earlier than a MACsec session timeout generated by traditional embodiments. The MACsec link alert is raised, by at least some embodiments, after a failure to successfully receive an MKPDU from the remote peer after a single MACsec “liveness” timeout interval elapses.

公开(公告)号：US12244642B1

公开(公告)日：2025-03-04

申请号：US18166762

申请日：2023-02-09

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Ajay Kachrani ,  Hao Wang

IPC: H04L29/06 ,  H04L9/40 ,  H04L45/00 ,  H04L45/28 ,  H04L45/60

Abstract: In some examples, a system includes a router device and a first adapter device in communication with the router device. The first adapter device includes processing circuitry configured to: communicate with the router device, wherein the router device is incapable of communicating in accordance with the MACsec protocol. The processing circuitry is further configured to establish an encrypted connection in accordance with the MACsec protocol between the first adapter device and a remote device, determine that the encrypted connection is offline, and output a message to the router device that the encrypted connection is offline. The router device is configured to communicate with the remote device via a second adapter device configured to communicate in accordance with the MACsec protocol and bypass the first adapter device.

公开(公告)号：US11606390B1

公开(公告)日：2023-03-14

申请号：US17217999

申请日：2021-03-30

Applicant: Juniper Networks, Inc.

Inventor： Gert Grammel ,  Ajay Kachrani ,  Hao Wang

IPC: H04L29/06 ,  H04L9/40 ,  H04L45/28 ,  H04L45/60 ,  H04L45/00

Abstract: In some examples, a system includes a router device and a first adapter device in communication with the router device. The first adapter device includes processing circuitry configured to: communicate with the router device, wherein the router device is incapable of communicating in accordance with the MACsec protocol. The processing circuitry is further configured to establish an encrypted connection in accordance with the MACsec protocol between the first adapter device and a remote device, determine that the encrypted connection is offline, and output a message to the router device that the encrypted connection is offline. The router device is configured to communicate with the remote device via a second adapter device configured to communicate in accordance with the MACsec protocol and bypass the first adapter device.

公开(公告)号：US20220103473A1

公开(公告)日：2022-03-31

申请号：US17032450

申请日：2020-09-25

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L12/741 ,  H04L12/751 ,  H04L29/06

Abstract: Disclosed embodiments utilize a layer three and/or layer four protocol to collect physical layer properties along a multi-hop network path between a source node and a destination node. The use of a layer three or layer four protocol provides an ability to span multiple links or networks between the source node and destination node, while also collecting the physical layer properties. Once physical layer properties along a network path can be understood, decisions relating to the configuration of the network path and/or whether to communicate via the network path are improved.

公开(公告)号：US11336647B2

公开(公告)日：2022-05-17

申请号：US17038222

申请日：2020-09-30

Applicant: Juniper Networks, Inc.

Inventor： Manish Talwar ,  Ajay Kachrani ,  Gert Grammel ,  Hao Wang ,  Tanweer Biswas

IPC: H04L29/06 ,  H04L65/1069 ,  H04L101/622 ,  H04L41/0604 ,  H04L45/00 ,  H04L43/16

Abstract: Embodiments improve error detection and recovery in media access control security sessions. A MACsec session is torn down after three liveness time intervals elapse without receiving a MACsec key exchange protocol data unit (MKPDU) from a remote peer. This delay between a cessation of effective network communication over the MACsec session and the expiration of the three “liveness” intervals results in increased packet loss and an increased network convergence time as a network continues to route/forward data over the MACsec session for a period of time after the MACsec session has entered secure block mode. To solve this problem, embodiments define a new alarm, called a MACsec link alert, which is raised earlier than a MACsec session timeout generated by traditional embodiments. The MACsec link alert is raised, by at least some embodiments, after a failure to successfully receive an MKPDU from the remote peer after a single MACsec “liveness” timeout interval elapses.

公开(公告)号：US10735333B2

公开(公告)日：2020-08-04

申请号：US16283331

申请日：2019-02-22

Applicant: Juniper Networks, Inc.

Inventor： Ajay Kachrani ,  Manish Talwar ,  Elmer Tolentino ,  Rathi Kartheek ,  Hao Wang

IPC: H04L12/823 ,  H04L1/20 ,  H04B10/40 ,  H04B10/50 ,  H04L12/24 ,  H04L12/26 ,  H04Q11/00 ,  H04B10/079 ,  H04B10/032

Abstract: In some embodiments, an apparatus comprises an optical transponder which includes a processor, an electrical interface and an optical interface. The processor is operatively coupled to the electrical interface and the optical interface. The optical interface is configured to be operatively coupled to a plurality of optical links and the electrical interface is configured to be operatively coupled to a router such that the optical transponder is configured to be operatively coupled between the plurality of optical links and the router. The processor is configured to perform pre-forward error correction (FEC) bit error rate (BER) detection to identify a degradation of an optical link from the plurality of optical links. The processor is configured to make modifications to packets designated to be transmitted via the optical link in response to the degradation being identified such that the router is notified of the degradation of the optical link.

公开(公告)号：US10425345B2

公开(公告)日：2019-09-24

申请号：US15720472

申请日：2017-09-29

Applicant: Juniper Networks, Inc.

Inventor： Ajay Kachrani ,  Manish Talwar ,  Elmer Tolentino ,  Rathi Kartheek ,  Hao Wang

IPC: H04L12/823 ,  H04L1/20 ,  H04B10/40 ,  H04L12/26 ,  H04Q11/00

Abstract: In some embodiments, an apparatus comprises an optical transponder which includes a processor, an electrical interface and an optical interface. The processor is operatively coupled to the electrical interface and the optical interface. The optical interface is configured to be operatively coupled to a plurality of optical links and the electrical interface is configured to be operatively coupled to a router such that the optical transponder is configured to be operatively coupled between the plurality of optical links and the router. The processor is configured to perform pre-forward error correction (FEC) bit error rate (BER) detection to identify a degradation of an optical link from the plurality of optical links. The processor is configured to make modifications to packets designated to be transmitted via the optical link in response to the degradation being identified such that the router is notified of the degradation of the optical link.