-
公开(公告)号:US20230396459A1
公开(公告)日:2023-12-07
申请号:US18452917
申请日:2023-08-21
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Eric M. Levy-Abegnoli , Patrick M. P. Wetterwald , Ratko Kovacina
CPC classification number: H04L12/1886 , H04L12/1881 , H04L63/0227
Abstract: A method includes receiving, at a first edge node, an Internet Protocol (IP) multicast address of a first silent host node. The method further includes receiving, at a second edge node, an IP multicast address of a second silent host node. The IP multicast address of the first silent host node is equal to the IP multicast address of the second silent host node. The method further includes storing the IP multicast address of the first and second silent host node in a shared entry of a routing table. The method further includes receiving, at a third edge node, a packet from a third host node and determining that a destination address of the packet corresponds to the IP multicast address stored in the shared entry of the routing table. The method further includes sending the packet to both the first host node and the second host node.
-
公开(公告)号:US11799514B2
公开(公告)日:2023-10-24
申请号:US17503904
申请日:2021-10-18
Applicant: Cisco Technology, Inc.
Inventor: Alessandro Erta , Luca Bisti , Domenico Ficara , Kasi Nalamalapu , Salvatore Valenza , Vincent Cuissard , Sudhir Kumar Jain , Loris Gazzarrini , Arun Khanna , Stefano Ferrari , Pascal Thubert
IPC: H04B1/7143 , H04W64/00 , H04W72/20
CPC classification number: H04B1/7143 , H04W64/006 , H04W72/20
Abstract: In one embodiment, a device identifies a path of travel of a mobile system. The device subdivides the path of travel into a plurality of zones. The device generates time-slotted channel hopping schedules for the plurality of zones, each time-slotted channel hopping schedule having an associated zone among the plurality of zones. The device causes the mobile system to communicate wirelessly with networking infrastructure located along the path of travel, in accordance with a particular one of the time-slotted channel hopping schedules while the mobile system is located in its associated zone.
-
193.
公开(公告)号:US11751146B2
公开(公告)日:2023-09-05
申请号:US17831009
申请日:2022-06-02
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Robert Edgar Barton , Jerome Henry , Eric Michel Levy-Abegnoli
CPC classification number: H04W52/383 , H04W24/02 , H04W40/244 , H04W84/18
Abstract: In one embodiment, a method comprises: determining, by a constrained network device in a low power and lossy network (LLN), a self-estimated density value of neighboring LLN devices based on wirelessly receiving an identified number of beacon message transmissions within an identified time interval from neighboring transmitting LLN devices in the LLN; setting, by the constrained network device, a first wireless transmit power value based on the self-estimated density value; and transmitting a beacon message at the first wireless transmit power value, the beacon message specifying the self-estimated density value, a corresponding trust metric for the self-estimated density value, and the first wireless transmit power value used by the constrained network device for transmitting the beacon message.
-
公开(公告)号:US11689442B2
公开(公告)日:2023-06-27
申请号:US17559640
申请日:2021-12-22
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Eric Levy-Abegnoli , Jakob Heitz
IPC: H04L45/02
CPC classification number: H04L45/02
Abstract: A particular fat tree network node stores default routing information indicating that the particular fat tree network node can reach a plurality of parent fat tree network nodes of the particular fat tree network node. The particular fat tree network node obtains, from a first parent fat tree network node of the plurality of parent fat tree network nodes, a negative disaggregation advertisement indicating that the first parent fat tree network node cannot reach a specific destination. The particular fat tree network node determines whether the first parent fat tree network node is the only parent fat tree network node of the plurality of parent fat tree network nodes that cannot reach the specific destination. If so, the particular fat tree network node installs supplemental routing information indicating that every parent fat tree network node except the first parent fat tree network node can reach the specific destination.
-
公开(公告)号:US20230179471A1
公开(公告)日:2023-06-08
申请号:US18103918
申请日:2023-01-31
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Nagendra Kumar Nainar , Carlos M. Pignataro
IPC: H04L41/0668 , H04L45/28 , H04L41/12 , H04L47/24
CPC classification number: H04L41/0668 , H04L45/28 , H04L41/12 , H04L47/24
Abstract: Techniques for identifying nodes in a data center fabric that are affected by a failure in the fabric, and selectively sending disaggregation advertisements to the nodes affected by the failure. The techniques include a process where a component monitors the network fabric to identify communication paths between leaf nodes, and determines what leaf nodes would be affected by a failure in those communication paths. The component may detect a failure in the network and determine which communication paths, and thus which leaf nodes, are affected by the failure and send disaggregation advertisements to the affected leaf nodes. In some examples, ingress leaf nodes send data through the fabric that indicate egress nodes for the communication paths. Intermediate nodes along may receive the data from the leaf nodes to identify communication paths, and the notify only affected nodes upon detecting a failure in the network.
-
公开(公告)号:US20230155978A1
公开(公告)日:2023-05-18
申请号:US17530244
申请日:2021-11-18
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Pradeep Kumar Kathail , Eric Levy-Abegnoli , David A. Maluf
IPC: H04L29/12
CPC classification number: H04L61/2507 , H04L61/1511
Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.
-
公开(公告)号:US20230092337A1
公开(公告)日:2023-03-23
申请号:US17483314
申请日:2021-09-23
Applicant: Cisco Technology, Inc.
Inventor: Alessandro Erta , Luca Bisti , Domenico Ficara , Kasi Nalamalapu , Salvatore Valenza , Vincent Cuissard , Sudhir Kumar Jain , Loris Gazzarrini , Arun Khanna , Stefano Ferrari , Pascal Thubert
Abstract: In one embodiment, a mobile system scans wireless channels for any upcoming access points using a dedicated monitor radio of the mobile system. The mobile system identifies a particular wireless channel in use by an upcoming access point. The mobile system notifies a second radio of the mobile system of the particular wireless channel. The mobile system performs a handoff between a current access point and the upcoming access point in part by switching the second radio of the mobile system to the particular wireless channel of the upcoming access point.
-
公开(公告)号:US20230068788A1
公开(公告)日:2023-03-02
申请号:US17462501
申请日:2021-08-31
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Patrick Wetterwald , Eric Levy- Abegnoli , Jonas Zaddach
Abstract: A container includes a user program and data generated by the user program within a regulatory jurisdiction. Before the container leaves the regulatory jurisdiction, the data is validated by the jurisdiction to ensure the data complies with privacy laws of the jurisdiction. Upon ingress to a second regulatory jurisdiction, the data is signed locally to provide for confirmation that the data can leave the second regulatory jurisdiction, since it was not generated within the second jurisdiction. By allowing the user program to move from the first regulatory jurisdiction to a second regulatory jurisdiction, the disclosed embodiments overcome limitations in current solutions that restrict access to local data based on what a public application programming interface (API) can provide. By operating within the regulatory jurisdiction, albeit subject to access controls imposed by that jurisdiction, flexibility in the processing of sensitive data is improved.
-
公开(公告)号:US11570653B2
公开(公告)日:2023-01-31
申请号:US16994829
申请日:2020-08-17
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Jerome Henry , Patrick Wetterwald , Jean-Philippe Vasseur
Abstract: In one embodiment, a method comprises causing, by a network controller device, a first access point (AP) device to initiate a reverse sounding operation comprising wirelessly requesting a mobile constrained network device to transmit a null data packet (NDP) at a first transmission interval, wirelessly receiving the NDP at the first transmission interval, and generating a reception report describing reception of the NDP and including beamforming information; causing, by the network controller device, a second AP device to generate a corresponding reception report describing a corresponding wireless detection of the NDP at the first transmission interval; and causing, by the network controller device, the mobile constrained network device to connect to a selected one of the first AP device or the second AP device for an identified data flow based on the respective reception reports from the first and second AP devices.
-
200.
公开(公告)号:US11558194B2
公开(公告)日:2023-01-17
申请号:US17336179
申请日:2021-06-01
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Huimin She , Patrick Wetterwald , Akram Ismail Sheriff , Eric Michel Levy-Abegnoli
IPC: H04L9/32 , H04L9/30 , G06F16/901 , H04L61/5007 , H04L45/00
Abstract: In one embodiment, a method comprises: receiving, by a parent network device providing at least a portion of a directed acyclic graph (DAG) according to a prescribed routing protocol in a low power and lossy network, a destination advertisement object (DAO) message, the DAO message specifying a target Internet Protocol (IP) address claimed by an advertising network device in the DAG and the DAO message further specifying a secure token associated with the target IP address; and selectively issuing a cryptographic challenge to the DAO message to validate whether the advertising network device generated the secure token.
-
-
-
-
-
-
-
-
-