公开(公告)号：US20140313928A1

公开(公告)日：2014-10-23

申请号：US13865926

申请日：2013-04-18

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Rex Fernando ,  Dhananjaya Rao ,  Jim Guichard ,  Paul Quinn

IPC: H04L12/751 ,  H04L12/931

CPC classification number: H04L45/02 ,  H04L49/70

Abstract: In one embodiment, a method includes storing a service topology route at a network device interconnecting at least two zones comprising a plurality of hosts, and propagating the service topology route to create a service chain comprising a service node in communication with the network device. The service topology route creates a forwarding state at network devices in the service chain for use in inter-zone routing in a virtual private network. An apparatus and logic are also disclosed herein.

Abstract translation: 在一个实施例中，一种方法包括在互连包括多个主机的至少两个区域的网络设备处存储服务拓扑路由，并且传播服务拓扑路由以创建包括与网络设备通信的服务节点的服务链。 服务拓扑路由在服务链中的网络设备上创建转发状态，以用于虚拟专用网络中的区域间路由。 本文还公开了一种装置和逻辑。

公开(公告)号：US09912480B2

公开(公告)日：2018-03-06

申请号：US15442722

申请日：2017-02-27

Applicant: Cisco Technology, Inc.

Inventor： Paul Quinn ,  Scott Fluhrer ,  Jim Guichard ,  Tirumaleswar Reddy ,  Prashanth Patil ,  David Ward

IPC: H04L12/24 ,  H04L9/32 ,  H04L29/06 ,  H04L9/08 ,  G06F9/445

CPC classification number: H04L9/3213 ,  H04L9/0861 ,  H04L9/3242 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/062 ,  H04L2463/062

Abstract: A network service packet (NSP) header security method includes receiving an NSP on a communication interface, analyzing, by a processor, the NSP in order to identify a plurality of service functions and an associated service function path for the plurality of service functions, identifying, by the processor, which security function or functions may be performed by each of the plurality of service functions on an NSP header to be generated for the NSP, requesting, by the processor, at least one key for securing at least part of the NSP header, receiving the at least one key on the communication interface, generating, by the processor, the NSP header for the NSP, securing, by the processor, the NSP header based on the at least one key, and sending, on the communication interface, the NSP with the NSP header to one of the plurality of service functions.

公开(公告)号：US09621520B2

公开(公告)日：2017-04-11

申请号：US14726534

申请日：2015-05-31

Applicant: Cisco Technology, Inc.

Inventor： Paul Quinn ,  Scott Fluhrer ,  Jim Guichard ,  Tirumaleswar Reddy ,  Prashanth Patil ,  David Ward

IPC: H04L9/08 ,  H04L29/06 ,  H04L9/32 ,  H04L12/953

CPC classification number: H04L9/3213 ,  H04L9/0861 ,  H04L9/3242 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/062 ,  H04L2463/062

Abstract: A network service packet (NSP) header security method includes receiving an NSP on a communication interface, analyzing, by a processor, the NSP in order to identify a plurality of service functions and an associated service function path for the plurality of service functions, identifying, by the processor, which security function or functions may be performed by each of the plurality of service functions on an NSP header to he generated for the NSP, requesting, by the processor, at least one key for securing at least part of the NSP header, receiving the at least one key on the communication interface, generating, by the processor, the NSP header for the NSP, securing, by the processor, the NSP header based on the at least one key, and sending, on the communication interface, the NSP with the NSP header to one of the plurality of service functions.

公开(公告)号：US09930008B2

公开(公告)日：2018-03-27

申请号：US14225279

申请日：2014-03-25

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Paul Quinn ,  Jim Guichard ,  Surendra Kumar ,  Peter Bosch

IPC: G06F15/16 ,  H04L12/28 ,  H04L29/12 ,  H04L12/24

CPC classification number: H04L61/256 ,  H04L41/0893 ,  H04L61/2507 ,  H04L61/6068

Abstract: In one embodiment, a method includes receiving a packet associated with a flow at a network device, classifying the packet at the network device based on information received from a policy layer, inserting a Network Address Translation (NAT) indicator for the flow into the packet, and transmitting the packet in a service chain comprising network address translation. The NAT indicator is associated with the flows before and after network address translation to provide symmetry between the service chain and a return traffic service chain. An apparatus and logic are also disclosed herein.

公开(公告)号：US09344350B2

公开(公告)日：2016-05-17

申请号：US13865926

申请日：2013-04-18

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Rex Fernando ,  Dhananjaya Rao ,  Jim Guichard ,  Paul Quinn

IPC: H04L12/28 ,  H04L12/751 ,  H04L12/931

CPC classification number: H04L45/02 ,  H04L49/70

Abstract: In one embodiment, a method includes storing a service topology route at a network device interconnecting at least two zones comprising a plurality of hosts, and propagating the service topology route to create a service chain comprising a service node in communication with the network device. The service topology route creates a forwarding state at network devices in the service chain for use in inter-zone routing in a virtual private network. An apparatus and logic are also disclosed herein.

Abstract translation: 在一个实施例中，一种方法包括在互连包括多个主机的至少两个区域的网络设备处存储服务拓扑路由，并且传播服务拓扑路由以创建包括与网络设备通信的服务节点的服务链。 服务拓扑路由在服务链中的网络设备上创建转发状态，以用于虚拟专用网络中的区域间路由。 本文还公开了一种装置和逻辑。

公开(公告)号：US20150281173A1

公开(公告)日：2015-10-01

申请号：US14225279

申请日：2014-03-25

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Paul Quinn ,  Jim Guichard ,  Surendra Kumar ,  Peter Bosch

IPC: H04L29/12

CPC classification number: H04L61/256 ,  H04L41/0893 ,  H04L61/2507 ,  H04L61/6068

Abstract: In one embodiment, a method includes receiving a packet associated with a flow at a network device, classifying the packet at the network device based on information received from a policy layer, inserting a Network Address Translation (NAT) indicator for the flow into the packet, and transmitting the packet in a service chain comprising network address translation. The NAT indicator is associated with the flows before and after network address translation to provide symmetry between the service chain and a return traffic service chain. An apparatus and logic are also disclosed herein.

Abstract translation: 在一个实施例中，一种方法包括接收与网络设备上的流相关联的分组，基于从策略层接收的信息对网络设备上的分组进行分类，将流的网络地址转换（NAT）指示符插入到分组中 并且在包括网络地址转换的服务链中传送分组。 NAT指示符与网络地址转换之前和之后的流相关联，以提供服务链和返回业务链之间的对称性。 本文还公开了一种装置和逻辑。