Cisco Technology, Inc.

Da-Yuan Tung

Atri Indiresan

Sanjay Kumar Hooda

David John Zacks

Peter Geoffrey Jones

Linda Tin-Wen Cheng

Kaushik Kumar Dam

Anand Pulicat Gopalakrishnan

Melvin Tsai

Presented herein is an exemplified system and method that provides visibility, for traffic analytics, into secured encapsulated packet (e.g., secure VXLAN-GPE packet, a secure metadata-GPE packet or other GPE standards). The exemplified system and method facilitate encryption of traffic in a granular manner that also facilitate the monitoring of said secure traffic in a fabric network in an end-to-end manner throughout the network. Such monitoring can be beneficially used for analytics, performance analysis, and network debugging/troubleshooting.

Secure traffic visibility and analytics for encrypted traffic

In one embodiment a network device includes a plurality of ports. The network device is adapted to receive at least one configuring instruction, and adapted, after receipt of any of the at least one configuring instruction, to configure one or more access ports, of the plurality of ports, for endpoint virtual local area network (VLAN) assignment that is in accordance with at least one VLAN assignment algorithm. The at least one VLAN assignment algorithm allows at least two endpoints to be assigned to at least two different respective VLANs of a plurality of VLANs in a network, the at least one VLAN assignment algorithm enabling the at least two endpoints to connect to a same access port of the one or more access ports and provide data which is not VLAN tagged when received at the same access port.

Access port for one or more VLANs

Growing community of inventors

Cupertino, CA, United States of America

Da-Yuan Tung