Cisco Technology, Inc.

Cicsco Technology, Inc.

Aamer Saeed Akhter

Mohamed Khalid

Rajiv Asati

Plamen Nedeltchev

Brian Eliot Weis

Haseeb Sarwar Niazi

Hazim Hashim Dahir

Jazib Frahim

Carlos M Pignataro

Kenneth Durazzo

Nancy Cam-Winget

Arivu Mani Ramasamy

L Alexander Clemm

Shyyunn Lin

Michael P O'Brien

Paul J Aitken

Steve Chang

Yuquan Jiang

Ciprian Pompiliu Popoviciu

Manikchand Roopchand Bafna

Aun Raza

Salman Asadullah

Eric Yu

Jerome Henry

Robert Edgar Barton

Paul M Quinn

Dana Lynn Blair

Warren Scott Wainner

Benoit Claise

Balachander Chandrasekaran

Pratima Pramod Sethi

Kavitha Kamarthy

Sunil Cherukuri

Andrew G Johnson

Chui-Tin Yen

Paul Atkins

Jason Guy

Derek L Huckaby

Shashi Sastry

Shashidhar P Patil

Mark Gillott

Robert Payment

Mohammed Khalid

Plamen Nedeltchev Nedeltchev

Shyyunn Sheran Lin

In one embodiment, a gateway device receives, from a centralized broker device, a data-access policy for a given computer network, the data-access policy defining which of one or more accessing entities are granted access to specific elements of data within the given computer network. When the gateway device then receives, from a particular accessing entity, a request for one or more particular elements of data from within the given computer network, it may determine, based on the data-access policy, whether the particular accessing entity has been granted access to each of the one or more particular elements of data of the request. As such, the gateway device may prevent access for the particular accessing entity to any of the one or more particular elements of the data request to which the particular accessing entity has not been granted access.

Broker-coordinated selective sharing of data

In one embodiment, a master on-boarding agent establishes a virtual private network (VPN) connection with a local on-boarding agent executed by a gateway of a vehicle. The master on-boarding agent receives, via the VPN connection, vehicle data obtained by the local on-boarding agent from a co-pilot system of the vehicle. The master on-boarding agent configures, based on the received vehicle data, the gateway of the vehicle with a network configuration, wherein the network configuration includes an Internet Protocol (IP) address for the gateway. The master on-boarding agent coordinates, based on the network configuration, application of a security policy to the gateway.

Automatic on-boarding agent for IOT edge routers in connected vehicles

In one embodiment, a supervisory device in a network, configured to interact with one or more sensors positioned in a given area and with a conference room scheduling service, obtains an acoustic feature of the area from one or more of the sensors. The supervisory device makes a determination that a conference room should be reserved based on the acoustic feature and selects a particular conference room based on the determination that a conference room should be reserved. The supervisory device instructs a conference room scheduling service to reserve the particular conference room.

Automatic generation of reservations for a meeting-space for disturbing noise creators

In one implementation, data is communicated along a communications route in a network. A mediatrace request is generated for the communications route. Responses to the mediatrace request are received from along the communications route. The hop-by-hop latency is passively measured, from the responses, with one-way delay along the communications route in the network.

Calculating latency in computer networks

In one implementation, performance statistics for a provider network are compiled and delivered outside of the provider network. The provider network includes a media trace proxy server that receives a media trace query for a media stream of a customer edge network device. The media trace proxy server initiates a route discovery process on the provider network in response to the request or in response to at least one network device in the provider network being nonresponsive to similar types of media trace queries. The media trace proxy server collects performance statistics from the at least one network device and forwards the performance statistics of the at least one network device to the customer edge network device. The performance statistics may include only those statistics authorized by a subscription level or administrative region of the customer edge network device.

Media flow tracing in third party devices

A method is disclosed for transmitting system management requests to computer systems along a network path using a network control protocol, such as RSVP. For example, an originating node may send a single system management request along a path to a destination node using a network control protocol. Each computer system along the network path may analyze the network control protocol message to determine whether the message contains a system management request. If a system management request is found in the message, the computer system may perform the system management function identified in the request, and respond to it.

Performing path-oriented systems management

In an embodiment, a method comprises obtaining a second network address at a computer node, which has been already associated with a first network address and provided first keying information; sending, to a key server computer, an update message that comprises both the first network address and the second network address; using the first keying information to encrypt messages that the computer node sends from the second network address to one or more other members of a group.

Changing group member reachability information

The present disclosure describes methods and systems for providing and enforcing scalable federated policies for network-provided flow-based performance metrics. Due to different security concerns related to different domains, varying group policies can be applied to different domains to ensure proper sharing and receipt of flow-based performance metrics. Some policies can limit the type of performance metric being shared among the nodes in the domain. Some policies allow less information to be exposed by specifying aggregated performance metrics to be shared among the nodes in the domain. A group key management infrastructure can be provided to enforce these group policies in the network in a scalable manner.

Scalable federated policy for network-provided flow-based performance metrics

Techniques are presented herein for enabling performance monitoring of flows within a management and provisioning tunnel used for communicating packets between a wireless controller and wireless access point devices. A wireless controller that is configured to communicate with at least one wireless access point obtains a packet to be sent to the wireless access point for wireless transmission in a wireless network by the wireless access point. The wireless controller identifies, based on the packet, traffic session flow information associated with the packet. The wireless controller encapsulates the packet with a tunneling header that comprises the traffic session flow information and sends the encapsulated packet to the wireless access point. The tunneling header may also comprise an application identifier (ID) associated with the packet.

Wireless network flow monitoring

In an example embodiment, a method for selecting a communication path is provided. The method may comprise receiving data encapsulated in a transport protocol. In addition, a classification type and exit path information associated with the classification type may be received. The data is associated with the classification type and then is encapsulated in Stream Control Transmission Protocol (SCTP) based on the exit path information. This exit path information is associated with the classification type that is associated with the data.

Communication path selection

A method is provided in one example embodiment and includes generating at a first network device Virtual Private Network ('VPN') encapsulated packets with anonymized headers; maintaining a table mapping the anonymized headers to original headers of the VPN encapsulated packets; receiving a trace request from an initiator; generating from the received trace request an out-of-tunnel trace request toward a second network device via at least one intermediate network device using the anonymized headers; and forwarding the received trace request as an in-tunnel trace request through a VPN tunnel.

Performance analysis of virtual private network segment on a per flow basis

Growing community of inventors

Cary, NC, United States of America

Aamer Saeed Akhter