公开(公告)号：US20170289032A1

公开(公告)日：2017-10-05

申请号：US15084332

申请日：2016-03-29

申请人： CISCO TECHNOLOGY, INC.

发明人： James N. Guichard ,  Carlos M. Pignataro ,  Yixing Ruan ,  Javed Asghar

IPC分类号： H04L12/741 ,  H04L12/723 ,  H04L12/46

CPC分类号： H04L12/4641 ,  H04L45/306

摘要： Embodiments of the present disclosure are directed to augmenting a Network Service Header (NSH) metadata of a data packet with a virtual routing and forwarding identifier (VRF-ID) and forgoing augmenting a virtual private network (VPN) label into a multiprotocol label switched (MPLS) metadata of the data packet. A provider edge router can use the VRF-ID to identify a next hop for the data packet as a service to be applied prior to forwarding the data packet to a VPN site.

公开(公告)号：US20170331737A1

公开(公告)日：2017-11-16

申请号：US15152213

申请日：2016-05-11

申请人： CISCO TECHNOLOGY, INC.

发明人： Yixing Ruan ,  James N. Guichard ,  Javed Asghar ,  Carlos M. Pignataro ,  Kenneth Eugene Gray

IPC分类号： H04L12/741 ,  H04L12/813 ,  H04L29/12 ,  H04L29/06

CPC分类号： H04L69/22 ,  H04L12/4633 ,  H04L45/306 ,  H04L45/566 ,  H04L45/586 ,  H04L45/64

摘要： Aspects of the embodiments are directed to augmenting a control packet with an interface identifier, the interface identifier identifying an interface at a physical network forwarding element; and transmitting the control packet with the interface identifier to the physical network forwarding element. The interface identifier can be included in metadata of a network service header (NSH). The NSH is encapsulated with the control packet, which is transmitted with the control packet. The NSH can be extracted and the interface identifier used to identify a user interface (or a presenting interface) based on a metadata lookup.

公开(公告)号：US10225104B2

公开(公告)日：2019-03-05

申请号：US15084332

申请日：2016-03-29

申请人： CISCO TECHNOLOGY, INC.

发明人： James N. Guichard ,  Carlos M. Pignataro ,  Yixing Ruan ,  Javed Asghar

IPC分类号： H04L12/46 ,  H04L12/725

摘要： Embodiments of the present disclosure are directed to augmenting a Network Service Header (NSH) metadata of a data packet with a virtual routing and forwarding identifier (VRF-ID) and forgoing augmenting a virtual private network (VPN) label into a multiprotocol label switched (MPLS) metadata of the data packet. A provider edge router can use the VRF-ID to identify a next hop for the data packet as a service to be applied prior to forwarding the data packet to a VPN site.

公开(公告)号：US09756013B2

公开(公告)日：2017-09-05

申请号：US14328296

申请日：2014-07-10

申请人： Cisco Technology, Inc.

发明人： Rajiv Asati ,  Wojciech Dec ,  Yixing Ruan

IPC分类号： H04L29/12

CPC分类号： H04L61/6059 ,  H04L61/2015 ,  H04L61/251 ,  H04L61/6063

摘要： In one embodiment, a provider edge (PE) device in a computer network determines an IPv4 address and link-layer address for each adjacent customer premise equipment (CPE) device, and assigns each CPE device a unique IPv6 address. The PE device stores a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each adjacent CPE, the mapping bound by a CPE session context, and uses the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device.

公开(公告)号：US10165092B2

公开(公告)日：2018-12-25

申请号：US15152213

申请日：2016-05-11

申请人： CISCO TECHNOLOGY, INC.

发明人： Yixing Ruan ,  James N. Guichard ,  Javed Asghar ,  Carlos M. Pignataro ,  Kenneth Eugene Gray

IPC分类号： H04L12/701 ,  H04L12/801 ,  H04L29/06 ,  H04L12/46 ,  H04L12/725 ,  H04L12/721 ,  H04L12/713

摘要： Aspects of the embodiments are directed to augmenting a control packet with an interface identifier, the interface identifier identifying an interface at a physical network forwarding element; and transmitting the control packet with the interface identifier to the physical network forwarding element. The interface identifier can be included in metadata of a network service header (NSH). The NSH is encapsulated with the control packet, which is transmitted with the control packet. The NSH can be extracted and the interface identifier used to identify a user interface (or a presenting interface) based on a metadata lookup.

公开(公告)号：US10142128B2

公开(公告)日：2018-11-27

申请号：US15784218

申请日：2017-10-16

申请人： Cisco Technology, Inc.

发明人： James N. Guichard ,  Paul Quinn ,  Javed Asghar ,  Reinaldo Penno ,  Yixing Ruan ,  Carlos M. Pignataro

IPC分类号： H04L12/801 ,  H04L12/28 ,  H04L12/751 ,  H04L1/04 ,  H04Q11/04 ,  H04L12/46 ,  H04L29/06

摘要： A method for applying network services to data traffic forwarded between virtual private network (VPN) sites includes: receiving a data packet addressed to a target site associated with the VPN, determining services to be applied to the data packet according to a service chain, where the determining is a function of at least one of the VPN, the origin site or the target site, adding an indication of a VPN forwarding context onto the data packet, encapsulating the data packet with Network Service Header encapsulation, where a header for the encapsulated data packet indicates at least the service chain; forwarding the encapsulated data packet in accordance with the service chain, receiving the encapsulated data packet at the end of the service chain, terminating the service chain, removing the encapsulation, and forwarding the data packet to a target destination per the indication of a VPN forwarding context.

公开(公告)号：US09825778B2

公开(公告)日：2017-11-21

申请号：US14870722

申请日：2015-09-30

申请人： Cisco Technology, Inc.

发明人： James N. Guichard ,  Paul Quinn ,  Javed Asghar ,  Reinaldo Penno ,  Yixing Ruan ,  Carlos M. Pignataro

IPC分类号： G01R31/08 ,  H04L12/28 ,  H04J3/16 ,  H04L12/46 ,  H04L29/06

CPC分类号： H04L12/4633 ,  H04L63/0272

摘要： A method for applying network services to data traffic forwarded between virtual private network (VPN) sites includes: receiving a data packet addressed to a target site associated with the VPN, determining services to be applied to the data packet according to a service chain, where the determining is a function of at least one of the VPN, the origin site or the target site, adding an indication of a VPN forwarding context onto the data packet, encapsulating the data packet with Network Service Header encapsulation, where a header for the encapsulated data packet indicates at least the service chain; forwarding the encapsulated data packet in accordance with the service chain, receiving the encapsulated data packet at the end of the service chain, terminating the service chain, removing the encapsulation, and forwarding the data packet to a target destination per the indication of a VPN forwarding context.

公开(公告)号：US20160014071A1

公开(公告)日：2016-01-14

申请号：US14328296

申请日：2014-07-10

申请人： Cisco Technology, Inc.

发明人： Rajiv Asati ,  Wojciech Dec ,  Yixing Ruan

IPC分类号： H04L29/12

CPC分类号： H04L61/6059 ,  H04L61/2015 ,  H04L61/251 ,  H04L61/6063

摘要： In one embodiment, a provider edge (PE) device in a computer network determines an IPv4 address and link-layer address for each adjacent customer premise equipment (CPE) device, and assigns each CPE device a unique IPv6 address. The PE device stores a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each adjacent CPE, the mapping bound by a CPE session context, and uses the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device.

摘要翻译： 在一个实施例中，计算机网络中的提供商边缘（PE）设备为每个相邻的客户驻地设备（CPE）设备确定IPv4地址和链路层地址，并为每个CPE设备分配唯一的IPv6地址。 PE设备存储唯一的IPv6地址和每个相邻CPE的组合IPv4和链路层地址之间的密钥对映射，映射由CPE会话环境绑定，并且使用CPE会话上下文在IPv4和IPv6之间转换所有 到特定CPE设备的网络流量。