Fast roaming with shared services in enterprise fabric based networks

    公开(公告)号:US10798195B2

    公开(公告)日:2020-10-06

    申请号:US15834341

    申请日:2017-12-07

    Abstract: The embodiments herein push notifications to network devices used by a shared service to which a roaming host in a network fabric is subscribed. For example, a network fabric controller can access a VN policy table which stores the relationships between the virtual networks in the network fabric. Using this table, the controller can identify what shared service VNs (i.e., extranets) can communicate with the host's VN. The controller can push out notifications to the network devices used by the shared service VNs to store the new location of the host. That is, the network devices that locally store a location of the host can update their routing caches to point to the new location of the host. In this manner, the network fabric can reduce the time needed to reconverge on the new location of the host by updating the network devices used by the shared service VNs.

    Efficient inter-VLAN routing in openflow networks

    公开(公告)号:US10581738B2

    公开(公告)日:2020-03-03

    申请号:US15956639

    申请日:2018-04-18

    Abstract: In embodiments disclosed herein involve receiving a first packet, where the first packet originated from a first device on a first virtual local area network (VLAN) in a first plurality of VLANs, where routing is enabled among each of the first plurality of VLANs. A first temporary value is assigned to a first VLAN identifier associated with the first packet, where the first temporary value corresponds to the first plurality of VLANs. Additionally, the first packet is processed based on a plurality of flow tables. Further, a first destination value is assigned to the first VLAN identifier, where the first destination value corresponds to a second VLAN in the first plurality of VLANs, and the first packet is transmitted to a second device on the second VLAN.

    SECURE WAN PATH SELECTION AT CAMPUS FABRIC EDGE

    公开(公告)号:US20200059457A1

    公开(公告)日:2020-02-20

    申请号:US16104456

    申请日:2018-08-17

    Abstract: A method is performed by an access router of an enterprise network including a first edge router to communicate with a second edge router over a wide area network (WAN). The method includes receiving a packet from a first endpoint, receiving from a mapping service a network location of a second edge router for which the packet is destined and a security association (SA) to encrypt the packet from the access router to the second edge router, and generating for the first edge router one or more path selectors for WAN path selection. The method includes encrypting the packet using the SA, and adding to the encrypted IP packet, in clear text, the path selectors and outer encapsulation including the network location, to produce an encrypted tunnel packet. The method also includes forwarding the encrypted tunnel packet to the second edge router via the first edge router and the WAN.

Patent Agency Ranking