公开(公告)号：US20230216788A1

公开(公告)日：2023-07-06

申请号：US18174711

申请日：2023-02-27

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Reshad Rahman ,  Eric Albin Voit

IPC: H04L45/42 ,  H04L45/24 ,  H04L9/32

CPC classification number: H04L45/42 ,  H04L45/24 ,  H04L9/3213

Abstract: In one embodiment, a method includes determining a secure path through a first plurality of network nodes within a network and determining an alternate secure path through a second plurality of network nodes within the network. The method also includes routing network traffic through the first plurality of network nodes of the secure path and detecting a failure in the secure path using single-hop BFD authentication. The method further includes rerouting the network traffic through the second plurality of network nodes of the alternate secure path.

公开(公告)号：US20200322383A1

公开(公告)日：2020-10-08

申请号：US16700838

申请日：2019-12-02

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Reshad Rahman ,  Eric Albin Voit

IPC: H04L29/06 ,  H04L12/24 ,  H04L12/721 ,  H04L12/707

Abstract: In one embodiment, a method includes determining a secure path through a first plurality of network nodes within a network and determining an alternate secure path through a second plurality of network nodes within the network. The method also includes routing network traffic through the first plurality of network nodes of the secure path and detecting a failure in the secure path using single-hop BFD authentication. The method further includes rerouting the network traffic through the second plurality of network nodes of the alternate secure path.

公开(公告)号：US20200322391A1

公开(公告)日：2020-10-08

申请号：US16579906

申请日：2019-09-24

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  David Delano Ward ,  Reshad Rahman ,  Subhasri Dhesikan ,  Eric Albin Voit

IPC: H04L29/06 ,  H04L12/913 ,  H04L29/08 ,  H04L12/16 ,  H04L12/723 ,  H04L12/707

Abstract: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including determining a path through a plurality of provider nodes within a provider network and determining that the path through the plurality of provider nodes within the provider network is secure. The operations also include receiving, from a customer node, a Resource Reservation Protocol (RSVP) path message comprising an attribute for a security request. The operations further include routing the RSVP path message along the path of the plurality of provider nodes.

公开(公告)号：US11785053B2

公开(公告)日：2023-10-10

申请号：US16579906

申请日：2019-09-24

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  David Delano Ward ,  Reshad Rahman ,  Subhasri Dhesikan ,  Eric Albin Voit

IPC: H04L29/06 ,  H04L9/40 ,  H04L12/16 ,  H04L45/00 ,  H04L45/50 ,  H04L47/724 ,  H04L69/326

CPC classification number: H04L63/205 ,  H04L12/16 ,  H04L45/22 ,  H04L45/50 ,  H04L47/724 ,  H04L63/1433 ,  H04L69/326

Abstract: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including determining a path through a plurality of provider nodes within a provider network and determining that the path through the plurality of provider nodes within the provider network is secure. The operations also include receiving, from a customer node, a Resource Reservation Protocol (RSVP) path message comprising an attribute for a security request. The operations further include routing the RSVP path message along the path of the plurality of provider nodes.

公开(公告)号：US11595441B2

公开(公告)日：2023-02-28

申请号：US16700838

申请日：2019-12-02

Applicant: Cisco Technology, Inc.

Inventor： Clarence Filsfils ,  Reshad Rahman ,  Eric Albin Voit

IPC: H04L9/40 ,  H04L41/0668 ,  H04L45/12 ,  H04L45/00

Abstract: In one embodiment, a method includes determining a secure path through a first plurality of network nodes within a network and determining an alternate secure path through a second plurality of network nodes within the network. The method also includes routing network traffic through the first plurality of network nodes of the secure path and detecting a failure in the secure path using single-hop BFD authentication. The method further includes rerouting the network traffic through the second plurality of network nodes of the alternate secure path.