公开(公告)号：US20230198990A1

公开(公告)日：2023-06-22

申请号：US17552394

申请日：2021-12-16

Applicant: Cisco Technology, Inc.

Inventor： Roberto Muccifora ,  Domenico Ficara ,  Amine Choukir ,  Ugo Mario Campiglio ,  Shree Murthy ,  Stephen M. Orr

IPC: H04L9/40 ,  H04L61/5038 ,  H04L45/74 ,  H04L101/622

CPC classification number: H04L63/102 ,  H04L63/0876 ,  H04L61/5038 ,  H04L63/104 ,  H04L45/74 ,  H04L2101/622

Abstract: Group identity assignment and policy enforcement may be provided. A User Defined Network Identifier (UDN ID) defining a group of client devices may be received. Next, a client identifier (ID) associated with a source client device that is associated with the group of client devices may be received. The UDN ID and the client ID may be encoded in an Extended Local Identifier (ELI) Media Access Control (MAC) address associated with the source client device. A source MAC address of a packet received from the source client device may then be substituted with the ELI MAC address. Then the packet may be forwarded.

公开(公告)号：US11678250B2

公开(公告)日：2023-06-13

申请号：US17240116

申请日：2021-04-26

Applicant: Cisco Technology, Inc.

Inventor： Alessandro Erta ,  Luca Bisti ,  Arun Khanna ,  Sudhir Kumar Jain ,  Kasi Nalamalapu ,  Stefano Ferrari ,  Salvatore Valenza ,  Domenico Ficara ,  Vincent Cuissard ,  Loris Gazzarrini ,  Rupak Chandra

IPC: H04W40/00 ,  H04W40/24 ,  H04W40/02 ,  H04W28/10 ,  H04L45/24 ,  H04W28/06 ,  H04L45/50

CPC classification number: H04W40/246 ,  H04L45/24 ,  H04L45/50 ,  H04W28/06 ,  H04W28/10 ,  H04W40/02

Abstract: In one embodiment, a device identifies a plurality of access points of a wireless network. The device also identifies a plurality of mobile nodes of a mobile system. The device establishes a first label-switched path in the wireless network that comprises a wireless link between a first mobile node in the plurality of mobile nodes and a first access point in the plurality of access points. The device establishes a second label-switched path in the wireless network that comprises a wireless link between a second mobile node of the mobile system and a second access point in the plurality of access points.

公开(公告)号：US20230171172A1

公开(公告)日：2023-06-01

申请号：US17538109

申请日：2021-11-30

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara ,  Vincent Cuissard ,  Luca Bisti ,  Alessandro Erta ,  Arun Khanna ,  Frank Brockners

IPC: H04L43/08 ,  H04L12/46

CPC classification number: H04L43/08 ,  H04L12/4633

Abstract: In one embodiment, a network device along a path in a network receives a schedule that controls when the networking device is to insert telemetry data into data traffic passing through the networking device. The networking device generates the telemetry data for insertion into the data traffic passing through the networking device. The networking device inserts, according to the schedule, the telemetry data into a particular packet of the data traffic passing through the networking device. The networking device sends the particular packet to a next hop along the path in the network.

公开(公告)号：US11665544B2

公开(公告)日：2023-05-30

申请号：US17147319

申请日：2021-01-12

Applicant: Cisco Technology, Inc.

Inventor： Ugo Mario Campiglio ,  Amine Choukir ,  Roberto Muccifora ,  Domenico Ficara ,  Sachin Dinkar Wakudkar

IPC: H04L9/40 ,  H04W12/06 ,  H04W12/069 ,  H04W12/71 ,  H04W12/041 ,  H04W12/033

CPC classification number: H04W12/069 ,  H04W12/033 ,  H04W12/041 ,  H04W12/71

Abstract: A method for providing multicast frames in a Multi-Dwelling Unit (MDU) is provided herein. An Access Point (AP) can receive a join request from a first client device. The AP can generate a Group Master Key (GMK) from the Pre-Shared Key (PSK) associated with a Basic Service Set (BSS) that includes the first client device. The AP can then derive a Group Transient Key (GTK) from the GMK. The AP may then send the GTK to the first client device. Thereinafter, the AP can send multicast frames to the first client device encrypted by the GTK. The first client device can decrypt the multicast frames with the GTK. However, a second client device, that does not share the PSK, may receive the multicast frame but cannot decrypt the multicast frames.

公开(公告)号：US20210360400A1

公开(公告)日：2021-11-18

申请号：US17090169

申请日：2020-11-05

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara ,  Ugo Mario Campiglio ,  Amine Choukir ,  Sachin Dinkar Wakudkar ,  Javier Ignacio Contreras Albesa ,  Jerome Henry

IPC: H04W12/06 ,  H04W12/04 ,  H04W12/00

Abstract: Presented herein are techniques to manage a wireless local area network. A method includes defining a plurality of geographical zones corresponding to a geographical area that is serviced by a common service set identifier for a wireless local area network, assigning a pre-shared key to a mobile station based on the plurality of geographical zones, wherein the pre-shared key is associated with predetermined policies for a user of the mobile station, associating a media access control address of the mobile station with the pre-shared key, and controlling access of the mobile station to the wireless local area network based on the predetermined policies.

公开(公告)号：US11140043B2

公开(公告)日：2021-10-05

申请号：US16576387

申请日：2019-09-19

Applicant: Cisco Technology Inc.

Inventor： Amine Choukir ,  Roberto Muccifora ,  Antonio Trifilo ,  Domenico Ficara ,  Vincent Cuissard ,  Salvatore Valenza

IPC: H04L12/24 ,  H04W12/06 ,  H04L29/12 ,  H04W84/12

Abstract: A method is provided in a wireless local area network controller in a wireless communication network. The wireless communication network includes one or more virtual networks identified with virtual network IDs, VNIDs. A request is received from a wireless client to onboard onto the network and the wireless client is mapped to an onboarding VNID. The onboarding VNID is associated with an onboarding virtual network that does not require an authentication of the wireless client. An Internet Protocol address assignment is forwarded to the wireless client. The wireless client is remapped from the onboarding VNID to the destination VNID after authenticating the wireless client. The wireless client maintains the assigned IP address after moving from the onboarding VNID to the destination VNID. Access to the wireless client on a virtual network identified by the destination VNID is provided via the assigned IP address.

公开(公告)号：US09749254B2

公开(公告)日：2017-08-29

申请号：US14280814

申请日：2014-05-19

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara

IPC: H04L12/869 ,  H04J3/24 ,  H04L12/875

CPC classification number: H04L47/60 ,  H04J3/247 ,  H04L47/56

Abstract: In one embodiment, a method is disclosed in which a device identifies a set of data stream rates for a plurality of data streams. A Huffman tree is constructed for data transmission time slots based on the set of data stream rates. A number of time slots assigned to a parent node in the tree are determined and evenly distributed to child nodes of the parent node, to assign the time slots to the data streams.

公开(公告)号：US09641351B2

公开(公告)日：2017-05-02

申请号：US14575832

申请日：2014-12-18

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Salvatore Valenza ,  Domenico Ficara ,  Roberto Muccifora ,  Leo Caldarola ,  Davide Cuda

IPC: H04W4/00 ,  H04L12/417 ,  H04L12/841 ,  H04L12/26

CPC classification number: H04L12/417 ,  H04L43/0852 ,  H04L47/283

Abstract: In one embodiment, a method includes receiving packets in a flow at a network device in a deterministic network, wherein at least one of the packets is transmitted from a source out of sync due to collision with another flow at the source, analyzing at the network device, the flow to reconstruct a period of the flow, and processing at the network device, the packets according to the period to synchronize the processing of the packets at the network device with the source and remove jitter from the flow. An apparatus and logic are also disclosed herein.

公开(公告)号：US20150172159A1

公开(公告)日：2015-06-18

申请号：US14109590

申请日：2013-12-17

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Domenico Ficara ,  Salvatore Valenza ,  Roberto Muccifora ,  Leo Caldarola

IPC: H04L12/26 ,  G06N5/00 ,  H04L29/06

CPC classification number: H04L63/1408 ,  G06F9/4498

Abstract: In one embodiment, a method includes sampling text in a received packet at a network device and analyzing the sampled text using a sampled deterministic finite automata (DFA) to identify matches between a set of regular expressions and the text. The sampled DFA is created with the regular expressions sampled at a sampling rate calculated for the regular expressions using operations including selecting a minimum sampling rate from sampling rates computed for each of the regular expressions based on a minimum length of the text that can match the regular expression. An apparatus and logic are also disclosed herein.

Abstract translation: 在一个实施例中，一种方法包括在网络设备处接收的分组中对文本进行采样，并使用采样的确定性有限自动机（DFA）分析采样的文本，以识别一组正则表达式和文本之间的匹配。 采用采样的DFA进行创建，其中采用以正则表达式计算的采样率采样的正则表达式，其中包括从基于最大长度的文本中选择最小采样率，该采样率基于每个正则表达式计算的采样率， 表达。 本文还公开了一种装置和逻辑。

公开(公告)号：US12299452B2

公开(公告)日：2025-05-13

申请号：US17571906

申请日：2022-01-10

Applicant: Cisco Technology, Inc.

Inventor： Thomas Vegas ,  Domenico Ficara ,  Anirban Karmakar ,  Giacomo Trifilo ,  Amine Choukir

IPC: G06F9/38

Abstract: This disclosure describes techniques for performing a remote front-drop of data for recovery after a pipeline stall. The techniques include using a receiver-side dropping strategy that is driven from the sender-side. Components of a pipeline determine whether a pipeline is operating within specified latency constraints (e.g., experiencing a pipeline stall). Upon detecting a pipeline stall, the sending device is notified of the stall. Once the sending device is notified of the pipeline stall, the sending device can determine what action(s) to perform to address the pipeline stall. For example, the sending device may instruct one or more components of the pipeline to discard already sent data that has not been processed. This allows the older data to be dropped on the stalled pipeline while keeping the more recently sent data.