Hewlett Packard Enterprise Development LP

Amit Pingale

Shabaresha Hemaraju

Isaac Theogaraj

Sujeeth Padavala

Venkatesan Marichetty

Shreekanth Chandranna

Kumar Puta Swamy

Suryanarayanan Devarajan

Rishabh Upadhyay

Sushil Regmi

An example branch gateway (BG) of a local area network (LAN) includes processing circuitry and a memory. The memory includes instructions that cause the BG to determine that a network traffic load of the BG is greater than that of another BG. The instructions further cause the BG to determine that a first network traffic load skew between the BG and the other BG is greater than a first threshold. The instructions further cause the BG to select a first virtual local area network (VLAN) of a set of VLANs of the LAN, wherein network traffic of client devices of the first VLAN is routed through the BG based on a master role of the first VLAN being assigned to the BG. The instructions further cause the BG to transmit a message to the other BG that assigns the master role of the first VLAN to the other BG.

Dynamic client balancing between branch gateways

Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Smart zero-touch provisioning (ZTP)

A method including receiving, in a controller, from a client device in a network, a resolution query specifying a host name, is provided. The method includes parsing the resolution query to determine whether the host name is associated with an core host or with a public host, and directing the resolution query to a remote domain name system server dedicated to service the core host when the host name is associated with an enterprise name. The method also includes directing the resolution query to a local domain name system server when the host name is associated with a public service provided by the public host. A system to perform the above method is also provided.

Domain name system (DNS) optimization for wide area networks

Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.

Switch authentication

Systems and methods are provided for redistributing virtual private network tunnels among a plurality of virtual private network concentrators. The method includes receiving, from each of the virtual private network concentrators, a respective utilization indicator; selecting a source one of the virtual private network concentrators according to the utilization indicators; selecting a destination one of the virtual private network concentrators according to the utilization indicators; selecting one of the virtual private network tunnels connected to the source one of the virtual private network concentrators; and transferring the selected one of the virtual private network tunnels from the source one of the virtual private network concentrators to the destination one of the virtual private network concentrators.

Growing community of inventors

Santa Clara, CA, United States of America

Amit Pingale