公开(公告)号：US08446818B2

公开(公告)日：2013-05-21

申请号：US12917014

申请日：2010-11-01

申请人： Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Lawrence James DiBurro ,  Shu Ching Shieh

发明人： Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Lawrence James DiBurro ,  Shu Ching Shieh

IPC分类号： H04J1/16

CPC分类号： H04L45/00 ,  H04L12/4641 ,  H04L45/22 ,  H04L45/24 ,  H04L45/586

摘要： A method, apparatus and computer program product for performing Routed Split Multi-Link Trunking Resiliency for Wireless Local Area Network split-plane environments is presented. A first network switch learns first data associated with a second network switch and the first network switch terminates an Access Tunnel (AT). The said second network switch learns second data associated with said first network switch. The first and second data are synchronized between the first network switch and the second network switch. The first network switch and the second network load sharing tunnel data packets. The second network switch forwards tunnel control packets received by the second network switch to the first network. A failure relating to said first network switch is detected and a new AT is established with the second network switch.

摘要翻译： 提出了一种用于为无线局域网分裂平面环境执行路由分路多链路中继弹性的方法，装置和计算机程序产品。 第一网络交换机学习与第二网络交换机相关联的第一数据，并且第一网络交换机终止接入隧道（AT）。 所述第二网络交换机学习与所述第一网络交换机相关联的第二数据。 第一和第二数据在第一网络交换机和第二网络交换机之间同步。 第一个网络交换机和第二个网络负载共享隧道数据包。 第二网络交换机将由第二网络交换机接收的隧道控制分组转发到第一网络。 检测到与所述第一网络交换机有关的故障，并且与第二网络交换机建立新的AT。

公开(公告)号：US20120170578A1

公开(公告)日：2012-07-05

申请号：US12980885

申请日：2010-12-29

申请人： Mohnish Anumala ,  Roger Lapuh ,  Ganesh Nakhawa

发明人： Mohnish Anumala ,  Roger Lapuh ,  Ganesh Nakhawa

IPC分类号： H04L12/56

CPC分类号： H04L12/56 ,  H04L12/1886 ,  H04L12/4641 ,  H04L45/04 ,  H04L45/16

摘要： Techniques disclosed herein include systems and methods for providing multicast Virtual Private Network (VPN) support for IP VPN networks, including IP VPN-lite networks. Such techniques provide multicast VPN capability over an IP unicast core network by creating a multicast service VLAN and IP interface, which is used for multicast control traffic exchange between VPN instances. Multicast VPN data traffic is then carried over unicast IP-in-IP tunnels. A given ingress Provide Edge (PE) replicates the multicast traffic for all receiving egress PEs, and adds control information so that the multicast traffic appears as unicast traffic to the Core network. With such a technique, a given Core network only needs to run an IP unicast that is free of VPN unicast or multicast route or tree information.

摘要翻译： 本文公开的技术包括为IP VPN网络（包括IP VPN-Lite网络）提供组播虚拟专用网（VPN）支持的系统和方法。 这种技术通过创建组播业务VLAN和IP接口，通过IP单播核心网提供组播VPN能力，用于VPN实例之间的组播控制流量交换。 组播VPN数据流量然后通过单播IP-in-IP隧道传输。 给定的入口提供边缘（PE）复制所有接收出口PE的组播流量，并添加控制信息，使得组播流量以单播流量出现到核心网络。 通过这种技术，给定的核心网络只需要运行一个没有VPN单播或组播路由或树信息的IP单播。

公开(公告)号：US20100329265A1

公开(公告)日：2010-12-30

申请号：US12492548

申请日：2009-06-26

申请人： Roger Lapuh ,  Mohnish Anumala

发明人： Roger Lapuh ,  Mohnish Anumala

IPC分类号： H04L12/56

CPC分类号： H04L45/00 ,  H04L12/4645 ,  H04L12/4679 ,  H04L45/66

摘要： MP-BGP VPN infrastructure based on IETF RFC 4364/2547 is used to configure a layer 2 VPN on an IP network. VRFs for the VPN are configured on Ethernet switches and service IP addresses are associated with each configured VRF. The service IP addresses are exchanged to enable VPN traffic to be encapsulated for transport over the IP network. To enable a L2 VPN to be established on the network, a VPN-VLAN ID will be configured for the L2 VPN and import/export route targets for the VPN-VLAN will be set in each VRF and UNI-VLAN that is part of the VPN. The VPN-VLAN will be announced to all PEs using MP-iBGP with export route targets set for this VPN-VLAN. The PE's control plane learns the VPN-VLAN on a logical port if the import RT matches the export RT received by the MP-iBGP control plane. Once the VPN-VLAN is learned on a logical port, the PE will perform MAC learning on that logical port and treat the logical port as if it were part of the L2 VLAN.

摘要翻译： 基于IETF RFC 4364/2547的MP-BGP VPN基础设施用于在IP网络上配置第2层VPN。 VPN的VRF在以太网交换机上配置，服务IP地址与每个配置的VRF相关联。 交换服务IP地址，使VPN流量能够被封装，以便通过IP网络进行传输。 为了在网络上建立L2 VPN，将为L2 VPN配置VPN-VLAN ID，VPN-VLAN的导入/导出路由目标将在每个VRF和UNI-VLAN中设置，作为 VPN。 VPN-VLAN将使用MP-iBGP向所有PE发布，并为此VPN-VLAN设置导出路由目标。 如果导入RT与MP-iBGP控制平面接收到的导出RT匹配，PE的控制面将在逻辑端口上学习VPN-VLAN。 一旦在逻辑端口学到VPN-VLAN，PE将在该逻辑端口上执行MAC学习，并将该逻辑端口视为L2 VLAN的一部分。

公开(公告)号：US09674767B2

公开(公告)日：2017-06-06

申请号：US13224413

申请日：2011-09-02

申请人： Alexandros Moisiadis ,  Mohnish Anumala

发明人： Alexandros Moisiadis ,  Mohnish Anumala

IPC分类号： G06F15/16 ,  H04W40/24 ,  H04W84/12 ,  H04W84/02 ,  H04W40/32 ,  H04L12/715

CPC分类号： H04W40/246 ,  H04L45/04 ,  H04W40/32 ,  H04W84/02 ,  H04W84/12

摘要： A method, apparatus and computer program product for forming a tiered Wireless Local Area Network (WLAN) server topology is presented. A Wireless Local Area Network (WLAN) having a plurality of Mobile Virtual Local Area Network (MVLAN) servers is broken into a plurality of zones, each zone including at least one MVLAN server. An Identifier (ID) is assigned to each zone. A MVLAN server in each zone is designated as a MVLAN gateway server, wherein MVLAN servers within a zone communicate with each other within the zone, wherein the MVLAN servers within a zone communicate directly with the MVLAN gateway sever within the zone, wherein MVLAN gateway servers communicate directly with each other, and wherein a MVLAN server within a first zone communicates with a MVLAN server in a second zone by way of the MVLAN gateway sever of the first zone and the MVLAN gateway server of the second zone.

公开(公告)号：US09131366B2

公开(公告)日：2015-09-08

申请号：US12339404

申请日：2008-12-19

申请人： Mohnish Anumala ,  Kumara-Das Karunakaran

发明人： Mohnish Anumala ,  Kumara-Das Karunakaran

IPC分类号： H04W8/26 ,  H04L12/46 ,  H04W92/02

CPC分类号： H04W8/26 ,  H04L12/4625 ,  H04L12/4662 ,  H04L12/4666 ,  H04W92/02

摘要： To unify virtualizations in a core network and a wireless access network, a virtual wireless network is mapped to a virtual network in the core network. Based on the mapping, data associated with a communications session can be communicated through the virtual wireless network and core virtual network.

摘要翻译： 为了在核心网络和无线接入网络中统一虚拟化，将虚拟无线网络映射到核心网络中的虚拟网络。 基于映射，可以通过虚拟无线网络和核心虚拟网络来传送与通信会话相关联的数据。

公开(公告)号：US08971332B2

公开(公告)日：2015-03-03

申请号：US13004979

申请日：2011-01-12

申请人： Paul Unbehagen ,  David Allan ,  Bruno Germain ,  Roger Lapuh ,  Mohnish Anumala ,  Nigel Bragg

发明人： Paul Unbehagen ,  David Allan ,  Bruno Germain ,  Roger Lapuh ,  Mohnish Anumala ,  Nigel Bragg

IPC分类号： H04L12/28 ,  H04L12/751 ,  H04L12/46 ,  H04L12/715 ,  H04L12/721

CPC分类号： H04L12/4662 ,  H04L12/462 ,  H04L12/4645 ,  H04L12/4683 ,  H04L45/02 ,  H04L45/028 ,  H04L45/04 ,  H04L45/502 ,  H04L45/52 ,  H04L45/54 ,  H04L45/66

摘要： Nodes on a link state protocol controlled Ethernet network implement a link state routing protocol such as IS-IS. Nodes assign an IP address or I-SID value per VRF and then advertise the IP addresses or I-SID values in IS-IS LSAs. When a packet is to be forwarded on the VPN, the ingress node identifies the VRF for the packet and performs an IP lookup in customer address space in the VRF to determine the next hop and the IP address or I-SID value of the VRF on the egress node. The ingress node prepends an I-SID or IP header to identify the VRFs and then creates a MAC header to allow the packet to be forwarded to the egress node on the link state protocol controlled Ethernet network. When the packet is received at the egress node, the MAC header is stripped from the packet and the appended I-SID or IP header is used to identify the egress VRF. A customer address space IP lookup is then performed in the identified VRF on the egress node using the information in the client IP header to determine how to forward the packet. Customer reachability information within a VPN may be exchanged between VRFs using iBGP, or directly by using link state protocol LSAs tagged with the relevant I-SID.

公开(公告)号：US20070150614A1

公开(公告)日：2007-06-28

申请号：US11316720

申请日：2005-12-23

申请人： Vikram Ramachandran ,  Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Hong-Zhou Li

发明人： Vikram Ramachandran ,  Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Hong-Zhou Li

IPC分类号： G06F15/173

CPC分类号： H04L45/00 ,  H04L45/56 ,  H04L63/101

摘要： Multiple non-conflicting actions associated with filter rules may be located and applied to a packet using a single ACL lookup by causing action records to be created from ACEs in the ACL, and then causing the ACL lookup to return the action record rather than any one particular ACE. Radix tables may be created to enable a search engine to quickly locate the appropriate action record based on a particular set of attributes associated with the incoming packet. The action record can contain multiple actions taken from multiple ACEs that apply to the particular packet. By grouping all the actions into an action record, and then searching for an action record that applies to the packet, it is possible to apply all non-conflicting actions to the packet regardless of the number of ACEs that are used to specify those actions. Since all the actions are located together, the actions of all ACEs may be applied to a packet using a single ACL lookup.

摘要翻译： 可以使用单个ACL查找来定位与过滤器规则相关联的多个非冲突操作，并通过使ACL中的ACE创建操作记录，然后使ACL查找返回操作记录而不是任何一个 特别的ACE。 可以创建基表，以使搜索引擎能够基于与输入分组相关联的一组特定属性快速定位适当的动作记录。 动作记录可以包含从适用于特定数据包的多个ACE采取的多个操作。 通过将所有操作分组到操作记录中，然后搜索适用于数据包的操作记录，可以将所有非冲突操作应用于数据包，而不管用于指定这些操作的ACE数量如何。 由于所有操作都位于一起，因此可以使用单个ACL查找将所有ACE的操作应用于数据包。

公开(公告)号：US20130060966A1

公开(公告)日：2013-03-07

申请号：US13224413

申请日：2011-09-02

申请人： Alexandros Moisiadis ,  Mohnish Anumala

发明人： Alexandros Moisiadis ,  Mohnish Anumala

IPC分类号： G06F15/16

CPC分类号： H04W40/246 ,  H04L45/04 ,  H04W40/32 ,  H04W84/02 ,  H04W84/12

摘要： A method, apparatus and computer program product for forming a tiered Wireless Local Area Network (WLAN) server topology is presented. A Wireless Local Area Network (WLAN) having a plurality of Mobile Virtual Local Area Network (MVLAN) servers is broken into a plurality of zones, each zone including at least one MVLAN server. An Identifier (ID) is assigned to each zone. A MVLAN server in each zone is designated as a MVLAN gateway server, wherein MVLAN servers within a zone communicate with each other within the zone, wherein the MVLAN servers within a zone communicate directly with the MVLAN gateway sever within the zone, wherein MVLAN gateway servers communicate directly with each other, and wherein a MVLAN server within a first zone communicates with a MVLAN server in a second zone by way of the MVLAN gateway sever of the first zone and the MVLAN gateway server of the second zone.

摘要翻译： 提出了一种用于形成分层无线局域网（WLAN）服务器拓扑的方法，装置和计算机程序产品。 具有多个移动虚拟局域网（MVLAN）服务器的无线局域网（WLAN）被分成多个区域，每个区域包括至少一个MVLAN服务器。 标识符（ID）被分配给每个区域。 每个区域中的MVLAN服务器被指定为MVLAN网关服务器，其中区域内的MVLAN服务器在区域内相互通信，其中区域内的MVLAN服务器与区域内的MVLAN网关服务器直接通信，其中MVLAN网关服务器 并且其中第一区域内的MVLAN服务器通过第一区域的MVLAN网关服务器和第二区域的MVLAN网关服务器与第二区域中的MVLAN服务器进行通信。

公开(公告)号：US20120106320A1

公开(公告)日：2012-05-03

申请号：US12917014

申请日：2010-11-01

申请人： Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Lawrence James DiBurro ,  Shu Ching Shieh

发明人： Alexandros Moisiadis ,  Mohnish Anumala ,  Debin Zhang ,  Lawrence James DiBurro ,  Shu Ching Shieh

IPC分类号： H04L12/26 ,  G06F11/07

CPC分类号： H04L45/00 ,  H04L12/4641 ,  H04L45/22 ,  H04L45/24 ,  H04L45/586

摘要： A method, apparatus and computer program product for performing Routed Split Multi-Link Trunking Resiliency for Wireless Local Area Network split-plane environments is presented. A first network switch learns first data associated with a second network switch and the first network switch terminates an Access Tunnel (AT). The said second network switch learns second data associated with said first network switch. The first and second data are synchronized between the first network switch and the second network switch. The first network switch and the second network load sharing tunnel data packets. The second network switch forwards tunnel control packets received by the second network switch to the first network. A failure relating to said first network switch is detected and a new AT is established with the second network switch.

摘要翻译： 提出了一种用于对无线局域网分裂平面环境进行路由分路多链路中继弹性的方法，装置和计算机程序产品。 第一网络交换机学习与第二网络交换机相关联的第一数据，并且第一网络交换机终止接入隧道（AT）。 所述第二网络交换机学习与所述第一网络交换机相关联的第二数据。 第一和第二数据在第一网络交换机和第二网络交换机之间同步。 第一个网络交换机和第二个网络负载共享隧道数据包。 第二网络交换机将由第二网络交换机接收的隧道控制分组转发到第一网络。 检测到与所述第一网络交换机有关的故障，并且与第二网络交换机建立新的AT。

公开(公告)号：US08098656B2

公开(公告)日：2012-01-17

申请号：US12492548

申请日：2009-06-26

申请人： Roger Lapuh ,  Mohnish Anumala

发明人： Roger Lapuh ,  Mohnish Anumala

IPC分类号： H04L12/50 ,  H04Q11/00

CPC分类号： H04L45/00 ,  H04L12/4645 ,  H04L12/4679 ,  H04L45/66

摘要： MP-BGP VPN infrastructure based on IETF RFC 4364/2547 is used to configure a layer 2 VPN on an IP network. VRFs for the VPN are configured on Ethernet switches and service IP addresses are associated with each configured VRF. The service IP addresses are exchanged to enable VPN traffic to be encapsulated for transport over the IP network. To enable a L2 VPN to be established on the network, a VPN-VLAN ID will be configured for the L2 VPN and import/export route targets for the VPN-VLAN will be set in each VRF and UNI-VLAN that is part of the VPN. The VPN-VLAN will be announced to all PEs using MP-iBGP with export route targets set for this VPN-VLAN. The PE's control plane learns the VPN-VLAN on a logical port if the import RT matches the export RT received by the MP-iBGP control plane. Once the VPN-VLAN is learned on a logical port, the PE will perform MAC learning on that logical port and treat the logical port as if it were part of the L2 VLAN.

摘要翻译： 基于IETF RFC 4364/2547的MP-BGP VPN基础设施用于在IP网络上配置第2层VPN。 VPN的VRF在以太网交换机上配置，服务IP地址与每个配置的VRF相关联。 交换服务IP地址，使VPN流量能够被封装，以便通过IP网络进行传输。 为了在网络上建立L2 VPN，将为L2 VPN配置VPN-VLAN ID，VPN-VLAN的导入/导出路由目标将在每个VRF和UNI-VLAN中设置，作为 VPN。 VPN-VLAN将使用MP-iBGP向所有PE发布，并为此VPN-VLAN设置导出路由目标。 如果导入RT与MP-iBGP控制平面接收到的导出RT匹配，PE的控制面将在逻辑端口上学习VPN-VLAN。 一旦在逻辑端口学到VPN-VLAN，PE将在该逻辑端口上执行MAC学习，并将该逻辑端口视为L2 VLAN的一部分。