公开(公告)号：US20210136583A1

公开(公告)日：2021-05-06

申请号：US17088770

申请日：2020-11-04

Applicant: Cisco Technology, Inc.

Inventor： Srinath Gundavelli ,  Vimal Srivastava ,  Mark Grayson ,  Sudhir Kumar Jain ,  Anand Oswal

IPC: H04W12/08 ,  H04W12/00 ,  H04W48/10 ,  H04W8/18 ,  H04W76/10 ,  H04W8/02 ,  H04W48/18

Abstract: Techniques are described to provide open access in a neutral host environment. In one example, a method includes obtaining, by a mobility management node of a neutral host network, a network connectivity request from a user equipment, wherein the network connectivity request comprises an indication of a preferred service provider to which the user equipment is to be connected; determining, by the mobility management node, that the preferred service provider provides non-subscription-based network connectivity for the neutral host network; based on determining that the preferred service provider provides non-subscription-based network connectivity for the neutral host network, establishing secure communications for the user equipment, wherein the secure communications are established for the user equipment without authenticating an identity of user equipment; and providing network connectivity between the user equipment and the preferred service provider upon establishing the secure communications.

公开(公告)号：US20210120408A1

公开(公告)日：2021-04-22

申请号：US16936562

申请日：2020-07-23

Applicant: Cisco Technology, Inc.

Inventor： Rajesh S. Pazhyannur ,  Arun G. Khanna ,  Anand Oswal

IPC: H04W12/06 ,  H04L29/06 ,  H04W8/18 ,  H04W48/18 ,  H04W12/00

Abstract: Systems and methods are provided for receiving, at an enterprise network, first authentication data of a citizens broadband radio service (CBRS)-enabled device, receiving, at the enterprise network, second authentication data of the CBRS-enabled device, the first authentication data of the CBRS-enabled device being a different type of authentication data than the second authentication data of the CBRS-enabled device, determining a class of the CBRS-enabled device based on the first authentication data and the second authentication data of the CBRS-enabled device, determining a network segment for the CBRS-enabled device based on the class of the CBRS-enabled device, and providing access to the CBRS-enabled device based on the determining of the network segment for the CBRS-enabled device.

公开(公告)号：US20210111952A1

公开(公告)日：2021-04-15

申请号：US16878106

申请日：2020-05-19

Applicant: Cisco Technology, Inc.

Inventor： Rajesh S. Pazhyannur ,  Anand Oswal ,  Arun G. Khanna ,  Kedar K. Gaonkar ,  Shree N. Murthy ,  Sudhir Jain

IPC: H04L12/24 ,  H04W76/10

Abstract: Certain embodiments disclose systems and methods for creating a user private network (UPN) based on 11ay technology. Methods of the present disclosure include creating a personal basic service set (PBSS) having a service device and one or more 11ay devices, the service device configured to wirelessly communicate with the one or more 11ay devices in the PBSS, creating a UPN having an access point located in communicative proximity with the service device, and associating at least one 11ay device of the one or more 11ay devices with the UPN, wherein the at least one 11ay device is configured to establish a wireless connection with the one or more 11ay devices using the service device when within a coverage area of the PBSS, and to establish a wireless connection with the one or more 11ay devices using the access point when outside the coverage area of the PBSS.

公开(公告)号：US10911330B2

公开(公告)日：2021-02-02

申请号：US16702272

申请日：2019-12-03

Applicant: Cisco Technology, Inc.

Inventor： Balaji Sundararajan ,  Vamsidhar Valluri ,  Chandramouli Balasubramanian ,  Anand Oswal ,  Ram Dular Singh

IPC: H04L12/24

Abstract: In one embodiment, a method includes providing a first profile to a plurality of edge routers of the SD-WAN, the plurality of edge routers operable to interface a plurality of devices to the SD-WAN. The first profile enables the plurality of edge routers to discover which devices of the plurality of devices support a first application. The method includes receiving, from one or more of the edge routers, information indicating which devices of the plurality of devices support the first application and building a first application fabric based on the information indicating which devices of the plurality of devices support the first application.

公开(公告)号：US10826775B1

公开(公告)日：2020-11-03

申请号：US16446338

申请日：2019-06-19

Applicant: Cisco Technology, Inc.

Inventor： Victor Moreno ,  Anand Oswal ,  Rex Emmanuel Fernando ,  Syam Sundar Appala ,  Sanjay Kumar Hooda

IPC: H04L12/24 ,  H04L12/715 ,  H04L29/06 ,  G06F9/455 ,  H04L12/721

Abstract: Systems, methods, and computer-readable media for providing cross-domain policy enforcement. In some examples, transit VRFs for a destination network domain and a source network domain are created. Route advertisements for nodes coupled to source VRFs in the source network domain are created that include identifications of the source VRFs. The route advertisements can be transmitted from a source transit VRF in the source network domain to a destination transit VRF in the destination network domain. The route advertisements can then be filtered at the destination transit VRF based on a cross-domain policy using the identifications of the source VRFs to export routes to destination VRFs in the destination network domain according to the cross-domain policy.

公开(公告)号：US20200296671A1

公开(公告)日：2020-09-17

申请号：US16299811

申请日：2019-03-12

Applicant: Cisco Technology, Inc.

Inventor： Abhishek Bhattacharyya ,  Jagdish Girimaji ,  Anand Oswal

IPC: H04W52/02 ,  H04W40/24 ,  H04W4/80 ,  H04W80/02

Abstract: A method includes generating, at a server, an event policy for controlling one or more wireless beacon devices in a network; detecting an event in the network; determining whether the event matches the event policy; when the event matches the event policy, generating programming information for configuring the one or more wireless beacon devices; and forwarding the programming information via one or more wireless access points to the one or more wireless beacon devices for configuring the one or more wireless beacon devices based on the programming information.

公开(公告)号：US20200177629A1

公开(公告)日：2020-06-04

申请号：US16535550

申请日：2019-08-08

Applicant: Cisco Technology, Inc.

Inventor： Sanjay Kumar Hooda ,  Anand Oswal ,  Nehal Bhau ,  Victor Moreno

IPC: H04L29/06 ,  H04L12/803

Abstract: A mapping system, under administrative control of a Wide Area Network (WAN) controller, can track each host, authorized to access a plurality of Local Area Networks (LANs), in one or more mapping databases including a first network address representing an identifier and a second network addressing representing a locator for each host. The mapping system can receive a request for resolution of a first identifier of a host not presently connected to the network. The mapping system can determine the mapping databases exclude a mapping for the first identifier. The mapping system can update the mapping databases with a first mapping including the first identifier and a first locator corresponding to a honeypot network device. The mapping system can transmit, to one or more LANs of the plurality of LANs, routing information to route traffic destined for the first identifier to the honeypot network device.

公开(公告)号：US09923773B2

公开(公告)日：2018-03-20

申请号：US14730637

申请日：2015-06-04

Applicant: Cisco Technology, Inc.

Inventor： Dana L. Blair ,  Anand Oswal

IPC: H04L12/24 ,  H04L12/46 ,  H04L12/813 ,  H04L12/911 ,  H04L12/713 ,  H04L12/721

CPC classification number: H04L41/0893 ,  H04L12/4641 ,  H04L45/586 ,  H04L45/70 ,  H04L47/20 ,  H04L47/783 ,  H04L47/825

Abstract: In one embodiment, a device in a network determines one or more network metrics regarding operation of the network. The device determines one or more policy constraints regarding the routing of network traffic through a virtual service platform (VSP). The device generates a VSP usage policy based on the one or more network metrics and on the one or more policy constraints. The VSP usage policy is operable to cause traffic in the network to be routed through a particular VSP that is selected based on the VSP usage policy. The device causes the VSP usage policy to be implemented in the network.

公开(公告)号：US20170012870A1

公开(公告)日：2017-01-12

申请号：US14792698

申请日：2015-07-07

Applicant: Cisco Technology, Inc.

Inventor： Dana L. Blair ,  Michael L. Sullenberger ,  Solomon T. Lucas ,  Steven W. Wood ,  Anand Oswal

IPC: H04L12/715 ,  H04L12/741 ,  H04L12/751 ,  H04L12/46

Abstract: In one embodiment, an electronic device maintains one or more tunnel-based overlays for a communication network. The communication network includes two or more physical provider networks. The device maintains a mapping between a particular application and the one or more overlays for the communication network. The device adjusts the mapping between the particular application and the one or more overlays for the communication network. The device causes one or more routers in the communication network to route traffic for the particular application according to the adjusted mapping between the application and the one or more overlays for the communication network.

Abstract translation: 在一个实施例中，电子设备维护用于通信网络的一个或多个基于隧道的覆盖。 通信网络包括两个或多个物理提供商网络。 设备维护特定应用与通信网络的一个或多个覆盖层之间的映射。 该设备调整特定应用与通信网络的一个或多个覆盖层之间的映射。 该设备使通信网络中的一个或多个路由器根据应用与通信网络的一个或多个覆盖之间的调整的映射来路由特定应用的流量。

公开(公告)号：US20150124829A1

公开(公告)日：2015-05-07

申请号：US14595012

申请日：2015-01-12

Applicant: Cisco Technology, Inc.

Inventor： Rajeev Koodli ,  Anand Oswal

IPC: H04L12/741 ,  H04L12/46

CPC classification number: H04L45/74 ,  H04L12/4633 ,  H04L12/4645 ,  H04L12/4654 ,  H04L61/103 ,  H04L61/2038

Abstract: A system may provide connectivity service in a multi-tenant network. A first node in the multi-tenant network can receive data packets, each of the data packets identifying one of a plurality of tenant devices. The first node can determine an Internet Protocol (IP) address associated with each of the data packets. The first node can determine a Virtual Local Area Network Identifier (VLAN ID) based on the IP address, the VLAN ID being a unique identifier of a respective one of the tenants. The first node can add the VLAN ID of a corresponding one of the tenants into a header of each of the data packets. The first node can transport the data packets to a second node in the multi-tenant network via a multi-tenant network tunnel protocol.

Abstract translation: 系统可以在多租户网络中提供连接服务。 多租户网络中的第一节点可以接收数据分组，每个数据分组标识多个租户设备中的一个。 第一节点可以确定与每个数据分组相关联的因特网协议（IP）地址。 第一节点可以基于IP地址确定虚拟局域网标识符（VLAN ID），VLAN ID是相应一个租户的唯一标识符。 第一节点可以将相应一个租户的VLAN ID添加到每个数据包的报头中。 第一节点可以经由多租户网络隧道协议将数据分组传输到多租户网络中的第二节点。