Enhanced EVPN MAC route advertisement having MAC (L2) level authentication, security and policy control

    公开(公告)号:US10091176B2

    公开(公告)日:2018-10-02

    申请号:US15079981

    申请日:2016-03-24

    Abstract: Techniques are described that enable MAC (L2) address authentication within an L2 switching network, such as a metro transport network. Moreover, when used in an EVPN, the techniques provide fine grain policy control over the L2 switching network so as to enable carrier networks to specify and control topologies for transporting packet-based communications. Access routers of the EVPN communicate utilizes enhanced EVPN MAC route advertisements that include an additional attribute indicating a request that L2 network address(es) being advertised be validated by a network address authentication device. A route controller relays the EVPN MAC advertisement upon validation of the L2 networks address. Moreover, the route controller may utilize the EVPN MAC route advertisements to distribute MAC-level policies to control topologies and MAC learning within the EVPN and provide services such as per-MAC traffic quota limits.

    Multi-protocol label switching rings

    公开(公告)号:US09729455B2

    公开(公告)日:2017-08-08

    申请号:US14318953

    申请日:2014-06-30

    Inventor: Kireeti Kompella

    Abstract: Techniques are described for specifying and constructing multi-protocol label switching (MPLS) rings. Routers may signal membership within MPLS rings and automatically establish ring-based label switch paths (LSPs) as components of the MPLS rings for packet transport within ring networks. In one example, a router includes a processor configured to establish an MPLS ring having a plurality of ring LSPs. Each of the ring LSPs is configured to transport MPLS packets around the ring network to a different one of the routers operating as an egress router for the respective ring LSP. Moreover, each of the ring LSPs comprises a bidirectional, multipoint-to-point (MP2P) LSP for which any of the routers can operate as an ingress to source packet traffic into the ring LSP for transport to the respective egress router for the ring LSP. Separate protection paths, bypass LSPs, detours or loop-free alternatives need not be signaled.

    Model-based service placement
    44.
    发明授权

    公开(公告)号:US12132615B2

    公开(公告)日:2024-10-29

    申请号:US18328901

    申请日:2023-06-05

    Abstract: An example computing device is configured to receive an instance of a customer service model representative of a plurality of customer services. Each of the plurality of customer services associated with a corresponding at least one requirement and a corresponding at least one constraint. The computing device is configured to receive an instance of a resource model representative of a plurality of resources and map the instance of the customer service model and the instance of the resource model to an internal placement model. The computing device is configured to allocate the plurality of resources to the plurality of customer services such that the at least one requirement and the at least one constraint for each of the plurality of customer services are satisfied and inverse map data indicating how the plurality of resources are allocated to a format consumable by the customer device and output the inverse mapped data.

    Generic layer independent fragmentation of non-internet protocol frames

    公开(公告)号:US12052181B2

    公开(公告)日:2024-07-30

    申请号:US18192709

    申请日:2023-03-30

    CPC classification number: H04L47/365 H04L45/74

    Abstract: A network device may receive a non-Internet protocol (non-IP) frame with a particular size and may compare the particular size to a maximum transmission unit (MTU) associated with a path between the network device and another network device. The network device may divide the non-IP frame into fragments, based on the particular size being greater than the MTU and may prepend generic fragmentation headers to the fragments to generate fragments with headers, based on the particular size being greater than the MTU. The network device may add generic fragmentation header labels and transport labels to the fragments with the headers to generate fragments with headers and labels, based on the particular size being greater than the MTU. The network device may transmit the fragments with the headers and the labels to the other network device, via the path, based on the particular size being greater than the MTU.

    Service placement assistance
    46.
    发明授权

    公开(公告)号:US11606269B1

    公开(公告)日:2023-03-14

    申请号:US17657260

    申请日:2022-03-30

    Abstract: An example computing device is configured to receive, from a customer device, an indication of a plurality of resources and an indication of a plurality of customer services, each of the plurality of customer services being associated with a corresponding at least one requirement and a corresponding at least one constraint. The computing device is configured to automatically determine, for each requirement and each constraint, whether the requirement or the constraint can only be satisfied by a particular resource of the plurality of resources, and allocate, based on the determining, at least one resource of the plurality of resources to at least one customer service of the plurality of customer services. The example computing device is configured to provide, to the customer device and subsequent to the determining for every requirement and for every constraint, information to enable the customer device to provision the at least one customer service.

    DETECTING EGRESSES OF A POINT-TO-MULTIPOINT LABEL SWITCHED PATH IN A RING NETWORK

    公开(公告)号:US20190363978A1

    公开(公告)日:2019-11-28

    申请号:US15986476

    申请日:2018-05-22

    Abstract: Techniques are described for detecting egress network devices of a point-to-multipoint (P2MP) label switched path (LSP). For example, a network device may include one or more processors configured to identify a P2MP LSP for receiving multicast traffic from a multicast source for a specific multicast group for which the network device has an interested receiver, wherein the network device is to be an egress network device of the P2MP LSP; and send, to an ingress network device of the P2MP LSP, a P2MP egress identification message to add the network device as an egress network device of the P2MP LSP, wherein the one or more processors are further configured to output the P2MP egress identification message into a multipoint-to-point (MP2P) ring LSP for which the ingress network device of the P2MP LSP is a sole egress network device of the MP2P ring LSP.

    Label distribution protocol (LDP) signaled multi-protocol label switching rings

    公开(公告)号:US10218611B2

    公开(公告)日:2019-02-26

    申请号:US15381796

    申请日:2016-12-16

    Abstract: Techniques are described for specifying and constructing multi-protocol label switching (MPLS) rings. Routers may signal membership within MPLS rings and automatically establish ring-based label switch paths (LSPs) as components of the MPLS rings for packet transport within ring networks. In one example, a router includes a processor configured to output Label Distribution Protocol (LDP) messages, as described herein, to establish an MPLS ring having a plurality of ring LSPs. Each of the ring LSPs is configured to transport MPLS packets around the ring network to a different one of the routers operating as an egress router for the respective ring LSP. Moreover, each of the ring LSPs comprises two counter-rotating multipoint-to-point (MP2P) LSPs for which any of the routers can operate as an ingress to source packet traffic into the ring LSP for transport to the respective egress router for the ring LSP.

    Transmitting packet label contexts within computer networks

    公开(公告)号:US09929947B1

    公开(公告)日:2018-03-27

    申请号:US15005543

    申请日:2016-01-25

    Inventor: Kireeti Kompella

    Abstract: In general, techniques are described for transmitting context information defining contexts for packet labels in a network. More specifically, a network device, e.g., a router, implements the context transmission techniques to facilitate debugging or troubleshooting of the network. The network device may comprise an interface card that receives a Multi-Protocol Label Switching (MPLS) data unit from another network device in accordance with a label switching protocol. The data unit may include a label stack affixed to a payload. The label stack may include one or more MPLS labels and context information associated with at least one of these labels, The interface card may, when forwarding the data unit, parse the data unit to determine the context information and then forward the data unit in accordance with these MPLS labels. A control unit included within the network device may record the forwarding of the data unit and the determined context information.

Patent Agency Ranking