公开(公告)号：US20170054688A1

公开(公告)日：2017-02-23

申请号：US14831557

申请日：2015-08-20

Applicant: Cisco Technology, Inc.

Inventor： Ripon BHATTACHARJEE ,  Sanjay Kumar HOODA ,  Nalinaksh M. PAI ,  Saravanan RADHAKRISHNAN

IPC: H04L29/06 ,  H04L12/24 ,  H04L12/947

CPC classification number: H04L63/0281 ,  H04L41/5003 ,  H04L41/5096 ,  H04L43/026 ,  H04L45/306 ,  H04L45/38 ,  H04L45/72 ,  H04L63/0254 ,  H04L63/08 ,  H04L67/322 ,  H04L69/22

Abstract: Techniques for tagging packets within a network fabric. An authentication device for a network fabric receives a first packet originating from a source device, in transit to a destination device, corresponding to a first network flow. User identification information corresponding to an authenticated user of the source device is inserted into a Network Services Header of the first packet. Embodiments receive a second packet that corresponds to the first network flow at the authentication device, the second packet including service identification information within a Network Services Header of the second packet that identifies a service type of the network flow. Upon receiving a third packet for the first network flow, the authentication device inserts the user identification and the service identification information into a Network Services Header of the third packet.

Abstract translation: 在网络结构中标记数据包的技术。 用于网络结构的认证设备从与源设备相对应的第一网络流接收到传送到目的地设备的第一分组。 与源设备的认证用户相对应的用户识别信息被插入到第一分组的网络服务报头中。 实施例接收对应于认证装置处的第一网络流的第二分组，第二分组包括识别网络流的服务类型的第二分组的网络服务报头内的服务标识信息。 在接收到用于第一网络流的第三分组时，认证设备将用户标识和服务标识信息插入到第三分组的网络服务报头中。