Arista Networks, Inc.

Cisco Technology, Inc.

Adam James Sweeney

Hugh Weber Holbrook

Silviu Dobrota

Premkumar Jonnala

Kenneth James Duda

Dehua Huang

Anshul Sadana

Prasanna Parthasarathy

Pradeep S Sudame

Vijay Mahadevan

Roman Olegovich Chertov

Hugh Holbrook

Victor Shih-Hua Wen

Saravanan Sellappa

Kenneth Joseph Blanc

Neha M Shah

Dileep Honsoge Ramesh

Karthik Shyam Krishnan Subraveti

Sivakumar Narayanan

Alton Lo

Jeevan Madhu Kamisetty

Richard A Johnson

Aparna Sushrut Karanjkar

Sudip Regmi

Fusun Ertemalp

Michael Chih-Yen Wang

Chandrashekhar Appanna

Victor Wen

Jaffar Hameed Abdul Kather Jilani

Kartik Chandran

Asang Kamalakar Dani

Zhong Xu

Nagarani Chandika

Christoph Schwarz

Avinash Ratnavel Maharaj Ratnavel

Jifei Song

Nicholas Tan

Wade Carpenter

Ravil Baizhiyenov

John Nelson

Kewei Shi

Daniel Cunningham

Marco E Foschiano

A command line interface in a network device provides for specifying Virtual Local Area Network (VLAN) tag manipulations using range mappings to avoid error-prone repetitive configuration. A flexible VLAN tag range mapping is described, where the original and transformed ranges can be specified for both inner and outer positions, as long as the number of tags on either side of the transformation is the same.

Mapping virtual local area network (VLAN) tags

In general, embodiments relate to a method for managing a network device. The method includes detecting a change of at least one physical port on the network device; and in response to detecting the change, disabling the at least one physical port, wherein disabling the at least one physical port prevents the at least one physical port from being allocated to any logical port on a network processor in the network device.

Systems and methods for control and management of shared logical ports on a network processor

A method and apparatus of a network element that processes a packet in the network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element receives a packet, with a packet switch unit, wherein the packet was received by the network element on an ingress interface. The network element further determines if the packet is to be stored in an external queue. In addition, the network element identifies the external queue for the packet based on one or more characteristics of the packet. The network element additionally forwards the packet to a packet storage unit, wherein the packet storage unit includes storage for the external queue. Furthermore, the network element receives the packet from the packet storage unit and forwards the packet to an egress interface corresponding to the external queue.

System and method of a high buffered high bandwidth network element

A method for processing network communications, the method including receiving a network packet at a network device and performing at least one lookup for the packet in one or more first lookup tables in which the one or more first lookup tables are programmed to include at least one of an exact match or longest prefix match (LPM) table entry. The method includes obtaining a security source segment and a security destination segment based upon the result of the at least one lookup for the packet in the one or more first lookup tables. The method further includes performing a lookup in a second lookup table based upon the security source segment and security destination segment in which the second lookup table is programmed in a content addressable memory. Based upon the result of the lookup in the second lookup table, processing a forwarding decision for the packet according to the security source segment and security destination segment.

Scalable network processing segmentation

Some embodiments provide a method, executable by a network device, that receives a first set of commands instructing the network device to allow network traffic to egress out of an authentication port of the network device. The authentication port is configured to belong to a first virtual local area network (VLAN). An unauthenticated device is connected to the authentication port. The method further receives a second set of commands instructing the network device to add ports belonging to the first VLAN to a broadcast domain of a second VLAN. The method also broadcasts an address request to the broadcast domain of the second VLAN. The method further receives, from the unauthenticated device, a response to the address request.

Authentication of passive devices

Systems and methods are provided herein for supporting Spanning Tree Protocol (STP) in networks that use Ethernet Virtual Private Network (EVPN) All-Active (A-A) multihoming. This may be accomplished by a network administrator defining a super root group comprising a plurality of network devices, wherein each network device provides A-A multihoming to a multihomed device. All network devices in the super root group use a common bridge ID when generating BPDU messages for STP. All network devices in the super root group will send BPDU messages comprising the common bridge ID to the multihomed device. Because the BPDU messages comprise a common bridge ID, the multihomed device treats the network devices in the super root group as a single local bridge, thus STP is enabled without causing STP flapping.

Spanning tree protocol with ethernet virtual private network all-active multihoming

In general, embodiments of the invention relate to routing packets between hosts or virtual machines in different layerdomains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between hosts or virtual machines in different layerdomains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).

Method and system for overlay routing with VXLAN

A network device includes a first agent programmed to provide a functionality of the network device. The network device also includes a message bus, distinct from the first agent, that identifies an update associated with the first agent, the update includes differential state information based, at least in part, on a state of the first agent, the state of the first agent is stored in a data structure exclusively managed by the first agent; in response to identifying the update: identifies a second agent that is subscribed to the first agent; and performs an action set to provide the second agent with access to the update.

System and method for updating state information

A method and apparatus of a device that starts an address resolution service on a network element after a boot-up of this network element is described. In an exemplary embodiment, the network element sends an indication of the boot-up. The network element further sends a request for an address resolution table and receives a reply with the requested address resolution table. In addition, the network element starts the address resolution service using the requested address resolution table.

System and method of persistent address resolution synchronization

Various embodiments are described herein, which provide a network element comprising a network port to receive production network data that is used for purposes other than testing the performance of a network, a data plane coupled to the network port, the data plane including a timing module to append a time stamp to a set of one or more time stamps included within the production network data, and a control plane coupled to the data plane, the control plane including a latency analyzer to analyze the set of one or more time stamps included within the production network data.

Hierarchical time stamping

In general, the invention relates to a method for managing a real network system. The method includes configuring, using Network Device State Information (NDSI) for at least a portion of the real network system, simulated network devices for a simulated network system. The method further includes obtaining simulation conditions for the simulated network system, simulating, using the simulation conditions, operation of the simulated network system to obtain a simulation result, and initiating an update of at least a portion of the real network system corresponding to the simulated network system.

Method and system for managing real network systems using simulation results

A network device includes a storage and a message bus. The storage stores subscription information. The message bus distributes state information associated with a first agent to at least two agents based on the subscription information. The message bus is distinct from the first agent. The state information is stored in a data structure exclusively managed by the first agent. The message bus, after distributing the state information, makes a determination that a connection to one of the at least two agents has been closed; and performs, based on the determination, an action set to prevent attempts to distribute future state information to the one of the at least two agents.

System and method for managing distribution of state information

Growing community of inventors

San Jose, CA, United States of America

Adam James Sweeney