FAST REROUTE FOR ETHERNET VIRTUAL PRIVATE NETWORKS - VIRTUAL EXTENSIBLE LOCAL AREA NETWORK

    公开(公告)号:US20220321458A1

    公开(公告)日:2022-10-06

    申请号:US17301351

    申请日:2021-03-31

    Abstract: Techniques are described for providing fast reroute for traffic in EVPN-VXLAN. For example, a backup PE device of an Ethernet segment is configured with an additional tunnel endpoint address (“reroute tunnel endpoint address”) for a backup path associated with a second split-horizon group that is different than a tunnel endpoint address and first split-horizon group for another path used for normal traffic forwarding. The backup PE device sends the reroute tunnel endpoint address to a primary PE device of the Ethernet segment, which uses the reroute tunnel endpoint address to configure a backup path to the backup PE device over the core network. For example, the primary PE device may install the reroute tunnel endpoint address within its forwarding plane and one or more operations to cause the primary PE device to encapsulate a VXLAN header including the reroute tunnel endpoint address when rerouting the packet along the backup path.

    Adaptive flow monitoring
    16.
    发明授权

    公开(公告)号:US11902136B1

    公开(公告)日:2024-02-13

    申请号:US17664174

    申请日:2022-05-19

    CPC classification number: H04L43/0888 H04L43/026 H04L43/0894 H04L43/16

    Abstract: An example network device includes memory, a communication unit, and processing circuitry coupled to the memory and the communication unit. The processing circuitry is configured to receive first samples of flows from an interface of another network device sampled at a first sampling rate and determine a first parameter based on the first samples. The processing circuitry is configured to receive second samples of flows from the interface sampled at a second sampling rate, wherein the second sampling rate is different than the first sampling rate and determine a second parameter based on the second samples. The processing circuitry is configured to determine a third sampling rate based on the first parameter and the second parameter, control the communication unit to transmit a signal indicative of the third sampling rate to the another network device; and receive third samples of flows from the interface sampled at the third sampling rate.

    DEPLOYING SECURE NEIGHBOR DISCOVERY IN EVPN

    公开(公告)号:US20210119828A1

    公开(公告)日:2021-04-22

    申请号:US16860828

    申请日:2020-04-28

    Abstract: Techniques are described for providing security extensions to neighbor discovery in Ethernet Virtual Private Network (EVPN). For example, a network device that implements Ethernet Virtual Private Network (EVPN) receives a neighbor discovery response message including a nonce originated by a second network device and not originated by the first network device. The network device processes the neighbor discovery response message including the nonce originated by the second network device and not originated by the first network device.

    Aliasing in an active-active multi-homed PBB-EVPN network

    公开(公告)号:US10523466B1

    公开(公告)日:2019-12-31

    申请号:US15788378

    申请日:2017-10-19

    Abstract: Techniques are described for providing aliasing in an active-active multi-homed Provider Backbone Bridging Ethernet Virtual Private Network (PBB-EVPN) network. For example, PE devices of a multi-homed Ethernet segment may send packets received from the PBB-EVPN core network over the Ethernet segment to the customer device even if the receiving PE device has not learned the source MAC address of the CE device. In particular, the PE devices coupled to the multi-homed Ethernet segment may apply aliasing techniques in which a PE device performs a lookup of a BMAC address and the Customer Virtual Local Area Network (C-VLAN), instead of a lookup of a destination MAC address, to determine the path to send the data traffic.

    Loop prevention for EVPN and PBB-EVPN

    公开(公告)号:US10469361B1

    公开(公告)日:2019-11-05

    申请号:US15270527

    申请日:2016-09-20

    Abstract: In general, techniques are described for reducing forwarding loops for layer (L2) traffic that traverses an EVPN or PBB-EVPN instance (EVI) by deterministically determining an access-facing logical interface to block from respective access-facing logical interfaces of PE devices that switch the L2 traffic using the EVI. A provider edge (PE) network device may detect an L2 forwarding loop on an L2 forwarding path that includes the access-facing logical interface. In response to detecting an L2 forwarding loop and based at least on comparing an identifier for the local PE device and an identifier for a remote PE device that implements the EVPN instance, the PE device may block the access-facing logical interface to block L2 traffic from the local customer network.

Patent Agency Ranking