Efficient host-controller address learning in ethernet switches
    1.
    发明授权
    Efficient host-controller address learning in ethernet switches 有权
    以太网交换机中高效的主机控制器地址学习

    公开(公告)号:US08472445B1

    公开(公告)日:2013-06-25

    申请号:US12917405

    申请日:2010-11-01

    IPC分类号: H04L12/28

    CPC分类号: H04L45/74 H04L49/35

    摘要: A network switch including a port, a memory, and a controller. The port has a port identifier and receives a packet (including an address of the source device) transmitted from a source device to the network switch. The memory is configured to store entries, each entry including (i) an identifier of a port of the network switch and (ii) an address of a network device. The controller is configured to (i) determine whether the address of the source device and the port identifier of the packet are stored in the memory and (ii) send a message to a processor requesting approval of the packet. The controller is configured to send the message when (i) the address of the source device is not stored in the memory or (ii) the port identifier of the packet is not stored with the address of the source device as one of the entries.

    摘要翻译: 包括端口,存储器和控制器的网络交换机。 该端口具有端口标识符,并接收从源设备发送到网络交换机的数据包(包括源设备的地址)。 存储器被配置为存储条目,每个条目包括(i)网络交换机的端口的标识符和(ii)网络设备的地址。 控制器被配置为(i)确定源设备的地址和分组的端口标识是否存储在存储器中,以及(ii)向请求批准分组的处理器发送消息。 控制器被配置为在(i)源设备的地址不存储在存储器中时发送消息,或者(ii)分组的端口标识符不与源设备的地址一起存储为条目之一。

    Efficient host-controller address learning in ethernet switches
    2.
    发明授权
    Efficient host-controller address learning in ethernet switches 有权
    以太网交换机中高效的主机控制器地址学习

    公开(公告)号:US07826452B1

    公开(公告)日:2010-11-02

    申请号:US10761879

    申请日:2004-01-21

    IPC分类号: H04L12/28

    CPC分类号: H04L45/74 H04L49/35

    摘要: A method, apparatus, and computer-readable media for a switch comprising a plurality of network ports and a central processing unit (CPU) interface comprises receiving, on one of the network ports, a packet comprising a source media access control (MAC) address; sending, to the CPU interface, a request to approve an association between the one of the network ports and the source MAC address when no request to approve the association between the one of the network ports and the source MAC address has been sent to the CPU interface; and sending, to the CPU interface, the request to approve the association between the one of the network ports and the source MAC address when an association between the source MAC address and a different one of the network ports has been approved.

    摘要翻译: 一种用于交换机的方法,装置和计算机可读介质,包括多个网络端口和中央处理单元(CPU)接口,包括在所述网络端口之一上接收包括源媒体访问控制(MAC)地址 ; 当没有请求批准一个网络端口和源MAC地址之间的关联的请求已经被发送到CPU时,向CPU接口发送批准一个网络端口与源MAC地址之间的关联的请求 接口; 并且当源MAC地址与不同网络端口之间的关联已被批准时,向CPU接口发送批准一个网络端口与源MAC地址之间的关联的请求。

    Switching apparatus and method based on virtual interfaces
    3.
    发明授权
    Switching apparatus and method based on virtual interfaces 有权
    基于虚拟接口的交换设备和方法

    公开(公告)号:US08625594B2

    公开(公告)日:2014-01-07

    申请号:US12938116

    申请日:2010-11-02

    IPC分类号: H04L12/28

    摘要: A network device comprises a plurality of physical ports, and a packet processing pipeline coupled to the plurality of physical ports. The packet processing pipeline is configured to assign a virtual port from a plurality of virtual ports to a packet received via one of the physical ports, wherein a quantity of the plurality of virtual ports is larger than a quantity of the plurality of physical ports, and wherein, for each of at least some of the physical ports, multiple virtual ports correspond to one physical port. The packet processing pipeline is also configured to assign a virtual domain from a plurality of virtual domains to the packet based on the assigned virtual port, and process the packet based on one or more of i) the assigned virtual port, ii) the assigned virtual domain, and iii) a header field of the packet, including determining zero, one, or more physical ports to which the packet is to be forwarded.

    摘要翻译: 网络设备包括多个物理端口和耦合到多个物理端口的分组处理流水线。 分组处理流水线被配置为将虚拟端口从多个虚拟端口分配给经由物理端口之一接收的分组,其中多个虚拟端口的数量大于多个物理端口的数量,以及 其中,对于至少一些物理端口中的每一个,多个虚拟端口对应于一个物理端口。 分组处理流水线还被配置为基于所分配的虚拟端口从多个虚拟域向所述分组分配虚拟域,并且基于所分配的虚拟端口中的一个或多个来处理所述分组,ii)所分配的虚拟 域,以及iii)分组的报头字段,包括确定要转发分组的零个,一个或多个物理端口。

    Preventing denial-of-service attacks employing broadcast packets
    4.
    发明授权
    Preventing denial-of-service attacks employing broadcast packets 有权
    使用广播数据包防止拒绝服务攻击

    公开(公告)号:US08830997B1

    公开(公告)日:2014-09-09

    申请号:US12917417

    申请日:2010-11-01

    IPC分类号: H04L12/28

    摘要: A network device including a processor having an internet protocol (IP) address, and a processor port configured to communicate exclusively with the processor. The network device also includes a plurality of network ports configured to communicate with network nodes external to the network device. In addition, the network device includes a forwarding engine configured to selectively transfer packets (i) among the plurality of network ports, and (ii) between the processor port and the plurality of network ports; receive a broadcast packet from one of the plurality of network ports, the broadcast packet including a target IP address; and forward the broadcast packet to the processor, via the processor port, only when both (i) the broadcast packet is a control packet, and (ii) the target IP address of the broadcast packet matches the IP address of processor.

    摘要翻译: 一种网络设备,包括具有互联网协议(IP)地址的处理器和被配置为与处理器专用通信的处理器端口。 网络设备还包括被配置为与网络设备外部的网络节点进行通信的多个网络端口。 另外,网络设备包括:转发引擎,被配置为选择性地传送多个网络端口中的分组(i),以及(ii)处理器端口和多个网络端口之间; 从所述多个网络端口之一接收广播分组,所述广播分组包括目标IP地址; 并且只有当(i)广播分组都是控制分组时,并且(ii)广播分组的目标IP地址与处理器的IP地址匹配,则经由处理器端口将广播分组转发到处理器。

    Switching Apparatus and Method Based on Virtual Interfaces
    5.
    发明申请
    Switching Apparatus and Method Based on Virtual Interfaces 有权
    基于虚拟接口的交换设备和方法

    公开(公告)号:US20110134925A1

    公开(公告)日:2011-06-09

    申请号:US12938116

    申请日:2010-11-02

    IPC分类号: H04L12/28

    摘要: A network device comprises a plurality of physical ports, and a packet processing pipeline coupled to the plurality of physical ports. The packet processing pipeline is configured to assign a virtual port from a plurality of virtual ports to a packet received via one of the physical ports, wherein a quantity of the plurality of virtual ports is larger than a quantity of the plurality of physical ports, and wherein, for each of at least some of the physical ports, multiple virtual ports correspond to one physical port. The packet processing pipeline is also configured to assign a virtual domain from a plurality of virtual domains to the packet based on the assigned virtual port, and process the packet based on one or more of i) the assigned virtual port, ii) the assigned virtual domain, and iii) a header field of the packet, including determining zero, one, or more physical ports to which the packet is to be forwarded.

    摘要翻译: 网络设备包括多个物理端口和耦合到多个物理端口的分组处理流水线。 分组处理流水线被配置为将虚拟端口从多个虚拟端口分配给经由物理端口之一接收的分组,其中多个虚拟端口的数量大于多个物理端口的数量,以及 其中,对于至少一些物理端口中的每一个,多个虚拟端口对应于一个物理端口。 分组处理流水线还被配置为基于所分配的虚拟端口从多个虚拟域向所述分组分配虚拟域,并且基于所分配的虚拟端口中的一个或多个来处理所述分组,ii)所分配的虚拟 域,以及iii)分组的报头字段,包括确定要转发分组的零个,一个或多个物理端口。

    Preventing denial-of-service attacks employing broadcast packets
    6.
    发明授权
    Preventing denial-of-service attacks employing broadcast packets 有权
    使用广播数据包防止拒绝服务攻击

    公开(公告)号:US07826447B1

    公开(公告)日:2010-11-02

    申请号:US11196961

    申请日:2005-08-04

    IPC分类号: H04L12/28 H04L12/56

    摘要: An apparatus having a corresponding method and computer program comprises a processor; a plurality of ports to transmit and receive packets of data, the plurality of ports comprising a processor port in communication with the processor, the packets comprising broadcast packets and multicast packets; a memory to store a table that associates the processor port with one or more Internet protocol (IP) addresses; and a forwarding engine to transfer the packets between the ports, to transfer each of the broadcast packets to the processor port only when the table associates a target IP address of the broadcast packet with the processor port, and to transfer each of the multicast packets to the processor port only when the table associates a target IP address of the multicast packet with the processor port.

    摘要翻译: 具有相应方法和计算机程序的装置包括处理器; 用于发送和接收数据分组的多个端口,所述多个端口包括与所述处理器通信的处理器端口,所述分组包括广播分组和多播分组; 用于存储将处理器端口与一个或多个因特网协议(IP)地址相关联的表的存储器; 以及转发引擎,用于在端口之间传送分组,仅当该表将广播分组的目标IP地址与处理器端口相关联时将每个广播分组传送到处理器端口,并将每个多播分组传送到 处理器端口只有当表将组播数据包的目标IP地址与处理器端口相关联时,

    Fast failover recovery for stackable network switches
    7.
    发明授权
    Fast failover recovery for stackable network switches 有权
    可堆叠网络交换机的快速故障切换恢复

    公开(公告)号:US08305878B1

    公开(公告)日:2012-11-06

    申请号:US12830649

    申请日:2010-07-06

    IPC分类号: G01R31/08 G06F11/00 G08C15/00

    摘要: A network switch including a plurality of stack units and a plurality of links. Each of the stack units includes a port, a plurality of interfaces, and a forwarding engine in communication with the interfaces and the port. Each of the plurality of links connects one of the interfaces of one of the stack units to another one of the interfaces of another one of the stack units. When one of the links is down, a loop flag in a first packet to be transferred by a corresponding one of the interfaces of a corresponding one of the stack units over the one of the links is toggled; and the forwarding engine of the corresponding one of the stack units is configured to transfer the first packet to another one of the interfaces of the corresponding one of the stack units for transfer over a different one of the links.

    摘要翻译: 一种网络交换机,包括多个堆叠单元和多个链路。 每个堆叠单元包括端口,多个接口和与接口和端口通信的转发引擎。 多个链接中的每个链接将一个堆叠单元的一个接口连接到另一个堆叠单元的另一个接口。 当其中一个链路断开时,切换由一个链路上的相应一个堆叠单元的相应一个接口传送的第一分组中的循环标志; 并且相应的一个堆叠单元的转发引擎被配置为将第一分组传送到相应的一个堆叠单元的另一个接口,以通过不同的一个链路进行传输。

    Fast failover recovery for stackable network switches
    8.
    发明授权
    Fast failover recovery for stackable network switches 有权
    可堆叠网络交换机的快速故障切换恢复

    公开(公告)号:US07756015B1

    公开(公告)日:2010-07-13

    申请号:US11900728

    申请日:2007-09-13

    IPC分类号: G01R31/08

    摘要: A stack unit for a stackable network switch, the stack unit having corresponding methods and computer programs, comprises a network port to exchange packets with a network; two stacking interfaces each to exchange the packets over a respective stacking link with another stack unit, wherein each stacking interface is assigned to the other stacking interface as an alternate stacking interface; and a forwarding engine to transfer the packets among the stacking interfaces and network port; wherein when one of the stacking links is down, the respective stacking interface toggles a loop flag in each packet received from the forwarding engine, and returns each received packet to the forwarding engine; and wherein the forwarding engine transfers each packet received from one of the stacking interfaces to the respective alternate stacking interface when the loop flag for the packet is set.

    摘要翻译: 用于可堆叠网络交换机的堆叠单元,具有相应方法和计算机程序的堆栈单元包括用于与网络交换分组的网络端口; 两个堆叠接口各自通过相应的堆叠链路与另一个堆叠单元进行交换,其中每个堆叠接口被分配给另一个堆叠接口作为备用堆叠接口; 以及转发引擎,在堆叠接口和网络端口之间传输数据包; 其中当所述堆叠链路之一关闭时,相应的堆叠接口切换从所述转发引擎接收的每个分组中的循环标志,并将每个接收的分组返回给所述转发引擎; 并且其中当所述分组的循环标志被设置时,所述转发引擎将从堆叠接口之一接收的每个分组传送到相应的备用堆叠接口。

    Method and apparatus for managing packets in a packet switched network
    9.
    发明授权
    Method and apparatus for managing packets in a packet switched network 有权
    用于在分组交换网络中管理分组的方法和装置

    公开(公告)号:US07706363B1

    公开(公告)日:2010-04-27

    申请号:US10829866

    申请日:2004-04-21

    IPC分类号: H04L12/28

    摘要: Method and apparatus for modifying standard VLAN tags to perform network packet switching. The method includes receiving a data packet at a port of a network switch and determining whether the data packet has a virtual local area network (VLAN) tagged frame. If the received data packet has a VLAN tagged frame, then the method further includes modifying and encoding fixed portions of the VLAN tag frame with switching information. The switching information includes information for central management of data packet flow through the network switch.

    摘要翻译: 修改标准VLAN标签以执行网络分组交换的方法和装置。 该方法包括在网络交换机的端口处接收数据分组,并确定数据分组是否具有标记有虚拟局域网(VLAN)的帧。 如果接收到的数据包具有VLAN标签帧,则该方法还包括修改和编码具有切换信息的VLAN标签帧的固定部分。 切换信息包括用于通过网络交换机的数据分组流的中央管理的信息。

    Method and apparatus for managing packets in a packet switched network
    10.
    发明授权
    Method and apparatus for managing packets in a packet switched network 有权
    用于在分组交换网络中管理分组的方法和装置

    公开(公告)号:US08923297B1

    公开(公告)日:2014-12-30

    申请号:US13415557

    申请日:2012-03-08

    IPC分类号: H04L12/28

    摘要: Methods and apparatus for managing packets in a packet switched network include, in at least one aspect, a device including: an input to receive a packet from one of a plurality of network devices, the plurality of network devices configured to communicate with one or more others of the network devices using a plurality of packets; and circuitry configured to control packet switching of the plurality of packets, at least one packet including: a switch tag including a tag portion embedded with switching information and an extended tag portion embedded with additional switching information, the switching information and the additional switching information configured to control a switching pattern associated with the at least one packet.

    摘要翻译: 在分组交换网络中用于管理分组的方法和装置在至少一个方面包括:设备,包括:用于从多个网络设备之一接收分组的输入,所述多个网络设备被配置为与一个或多个 使用多个分组的其他网络设备; 以及电路,被配置为控制所述多个分组的分组交换,所述至少一个分组包括:包括嵌入有交换信息的标签部分的交换标签和嵌入​​有附加切换信息的扩展标签部分,所述切换信息和所述附加切换信息被配置 以控制与所述至少一个分组相关联的切换模式。