Dell Products Inc.

Force10 Networks, Inc.

Avinash Natarajan

Shivakumar Sundaram

Ramasubramani Mahadevan

Pathangi Narasimhan Janardhanan

Sudharsan Dhamal Gopalarathnam

Krishnamurthy Subramanian

Balaji Venkat Venkataswami

Anoop Ghanwani

Wanqun Bao

Ravikumar Sivasankar

Mohnish Anumala

Karthik Krishnamurthy

Damodharan Sreenivasagaperumal

Shathish Muthu Venkatesan

Aravind Babu Mahendrababu

Janardhanan Pathangi Narasimhan

Rajasekhar Pulluru

K P Balasubramanian

Venkata Gouri Rajesh E

Sanal Kumar Sivaraman

Damodharan Screenivasaga Perumal

Vinoth Kumar Arumugam

Nirupa Venkatapathy

Access control systems and methods herein successfully overcome ACL group width limitations of existing designs by splitting an ACL group across different units, e.g., to create two ACL groups that each has a relatively smaller width. In embodiments, availability of ACL space is increased by hierarchically splitting an ACL table to fit into different two coupled devices and modifying certain fields carrying metadata in packets that are exchanged between the devices, such that one chipset may carry information about the lookup of another. In embodiments, an ACL group for a port extender is created by selectively creating a sub-group with qualifiers that fit within an available group width, and moving the remaining qualifiers to a controlling bridge to achieve the desired functionality.

Systems and methods for hierarchical access control across devices in a network environment

A VXLAN multi-tenant inter-networking device packet forwarding system includes a first aggregated networking device coupled to a first host device and a second aggregated networking device that is coupled to second host devices. The first aggregated networking device receives a data packet from the first host device and, in response, identifies a virtual network associated with the first host device. Based on a first and second portion of a virtual network identifier that identifies the virtual network, the first aggregated networking device generates respective first and second packet forwarding identifiers. The first aggregated networking device then provides the first and second packet forwarding identifiers in the data packet, and forwards the data packet to the second aggregated networking device. The second aggregated networking device may then forward the data packet to one of the second host devices based on the first and second packet forwarding identifiers in the data packet.

VXLAN multi-tenant inter-networking device packet forwarding system

An address resolution system a host device, a first networking device, and a second networking device that is coupled to the host device and the first networking device. The second networking device is configured to send a first address resolution communication to the first networking device. The second networking device may then receive a second address resolution communication from the first networking device in response to the first address resolution communication. The second address resolution communication includes networking device identification data that identifies the first networking device as having a networking type. The second networking device may then allocate, in an address resolution database in response to the networking device identification data identifying the first networking device as having the networking type, a first address resolution entry for the first networking device that includes an egress object.

Address resolution system

Described herein are systems and methods that provide for auto-discovery of VXLAN tunnel endpoints (VTEPs) using a protocol-independent multicast (PIM) bootstrap router (BSR). In one or more embodiments, a node may be configured via PIM messaging in which nodes of a network provide their candidate-rendezvous point (RP) advertisements send their information of candidate-RP to multicast group information to an elected BSR. The elected BSR consolidates the candidate-RP to multicast group information and propagates this information to nodes through PIM messages to all PIM routers in the network. In one or more embodiments, a node uses this information in combination with its local configuration mapping of VNIDs-to-multicast-group information to generate a remote VTEP-IP-(RP)-to-VNID mapping, which can be used to auto configure the node's VXLAN with remote-VTEP and VNI profiles in static VXLAN deployments.

Methods and systems for auto-discovery of VXLAN VTEPs using PIM BSR

Various embodiments of the invention allow for rapid communication in virtual link trunking (VLT) networks in which network traffic flows over not all-homed VLT peer devices, while honoring Equal Cost Multi Path (ECMP) decisions and normal route decisions about next hops. Traffic flow is made deterministic and free of sub-optimal paths that otherwise cause unnecessary traffic over inter-node links in the VLT domain. In embodiments, this is accomplished by using receiving VLAN interface-IP addresses from VLT devices in order to create and use a sub-LAG egress table from which sets of ports that lead to intended VLT devices are derived. In embodiments, instead of a VLAN interface-IP addresses a routing MAC address is used when forming the sub-LAG.

Systems and methods to route over a link aggregation group to a true next hop

Embodiments are directed to facilitate multiple tunnels to be reachable via inter-chassis ling from virtual link trunking (VLT) peers and also to avoid traffic tromboning with an optimal path to all next hops. During initialization, a default egress object is created through an ICL with the next hop defined as VLT peer2 by setting the MAC address to be the MAC address of the VLT peer2, and the VLAN to be any one of the L3 spanned VLANs. When any of the VXLAN tunnels are resolved through ICL LAG, the process uses the default egress object created on ICL. Using the default egress object created on ICL, any traffic from VLT peer1 intended to go through ICL is terminated on VLT peer2 and will get routed again to their respective next hops. This creates a single egress object to the VLT peer and allowing multiple VXLAN tunnels to be reachable through ICL with optimal path towards all next hops.

Multiple VXLAN tunnel reachability

Embodiments of the present invention comprise systems and methods for monitoring communication connectivity between applications remotely separated from each other in a network. The system includes: one or more processors; a memory communicatively coupled to the one or more processors; a network interface communicatively coupled to the one or more processors; and an agent communicatively coupled to the network interface and configured to: receive a registration for an application operating on the information handling system; monitor a liveliness status of a communication session between the agent and a remote agent operating on a remote information handling system, the communication session being enabled via the network interface; and notify the application of a fault in the communication session responsive to detecting that the fault exists.

Mechanism for rapid network failure detection for faster switch-over in server-to-server applications

A system, method, and computer-readable medium are disclosed for managing an IT environment via a social network management operation. In various embodiments, the social network management operation enables an IT administrator to manage an IT environment using a social network analog. With the social network analog, IT administrators identify devices within the IT environment as friends. Additionally, in certain embodiments, events that occur in the devices which have been identified as friends by the IT administrators can be associated with an interest list. Additionally, in certain embodiments, the IT environment includes a plurality of spans of control, each of which is administered by different IT administrators.

Solution management based on a social network of devices and administrators

An information handling system is provided. The information handling system includes a first network device that forms at least part of a first set of network devices. The first network device provides an interface between a local first server rack and a cloud and has one or more processors in communication with a memory. The first network device is configured to receive information from a second set of network devices that identifies a default gateway for a virtual machine running on a remote server rack. The first network device is also configured to create a local destination address entry associated with information, to store the entry in an address table in the memory, and to receive a packet having the information identifying the default gateway as a destination address. The first network device is further configured to forward the packet into the cloud on in proxy for the default gateway.

Systems and methods of inter data center out-bound traffic management

An inter-networking device link provisioning system includes an extending device. In response to a plurality of networking devices being connected to the extending device, the extending device provides each of the plurality of networking devices with an identity of the other of the plurality of networking devices that are connected to the extending device. When a first networking device and a second networking device are connected together and to the extending device, the first networking device receives a second device identity of the second networking device from the extending device and provisions an inter-networking device link with the second networking device, and the second networking device receives a first device identity of the first networking device from the extending device and provisions the inter-networking device link with the first networking device.

Inter-networking device link provisioning system

An N-port, shared-memory switch allocates a shared headroom buffer pool (Ps) for a priority group (PG). Ps is smaller than a worst case headroom buffer pool (Pw), where Pw equals the sum of worst case headrooms corresponding to each port-priority tuple (PPT) associated with the PG. Each worst case headroom comprises headroom required to buffer worst case, post-pause, traffic received on that PPT. Subject to a PPT maximum, each PPT may consume Ps as needed. Because rarely will all PPTs simultaneously experience worst case traffic, Ps may be significantly smaller than Pw, e.g., Ps&#x3c;(Pw/A) where M&#x3e;=2. Ps may be size-adjusted based on utilization of Ps, without halting traffic to or from the switch. If Ps utilization exceeds an upper utilization threshold, Ps may be increased, subject to a maximum threshold (Pmax). Conversely, if utilization falls below a lower utilization threshold, Ps may be decreased.

Self tuning buffer allocation in a shared-memory switch

Aspects of the present invention include an arbitrary N-Node virtual link trunking (VLT) system comprising a set of N nodes collectively provide a logical fabric-level view that is consistent across the set of N nodes. Embodiments of the arbitrary N-Node VLT system comprise a control plane mechanism to provide Layer 2 multipathing between access network devices (switches or servers) and the core network. The N-Node VLT system provides a loop-free topology with active-active load-sharing of uplinks from access to the core. Accordingly, the N-Node VLT system eliminates the disadvantage of Spanning Tree Protocol (STP) (active-standby links) by allowing link aggregation group (LAG) terminations on multiple separate distribution or core switches and also supporting a loop-free topology. Additional benefits of an N-Node VLT system include, but are not limited to, higher resiliency, improved link utilization, and improved manageability of the network.

N-node link aggregation group (LAG) systems that can support various topologies

Embodiments of the present invention include systems and methods for preventing traffic loss of data directed to a destination in a network. A router in the network attempts to install a route prefix of a destination or an ARP entry in the router. If the attempt fails, the router determines whether the routing device originates the uninstalled route prefix or a set of route prefixes pointing the uninstalled ARP entry as next hop in an internet protocol (IP) reachability. If the determination is negative, the router sends a message to a neighboring router to add the router to the exclude route list of the neighboring router. When the neighboring router determines an optimal route involving the uninstalled route prefix or the set of route prefixes pointing the uninstalled ARP entry, it looks up the exclude route list so that the router is not included when determining the optimal route.

Growing community of inventors

Chennai, India

Avinash Natarajan