Cisco Technology, Inc.

Dhananjaya Rao

Hasmit S Grover

Victor Manuel Moreno

Gaurav Badoni

Ali Sajassi

Vipin Jain

Rex Emmanuel Fernando

Sami Boutros

Dino Farinacci

Raghava Kodigenahalli Sivaramu

Nataraj Bacthu

Sameer Merchant

Neeraj Malhotra

Vrushali Ashtaputre

Krishnaswamy Muddenahally Ananthamurthy

Balaji Pitta Venkatachalapathy

Sridhar Santhanam

Senthil Kenchiah

Mankamana Prasad Mishra

Sanjay Sane

Ayan Banerjee

Anil Lohiya

Swadesh Agrawal

Jakob Heitz

Tony Speakman

Sameer Ranjit Gulrajani

Nair Venugopal

Deepak Dayama

Pascal Thubert

Eric Albin Voit

Keyur Patel

Shyam N Kapadia

Paul M Quinn

Chandan Mishra

Nilesh Shah

Jim Guichard

Patrice Bellagamba

Govind Prasad Sharma

Sreenivas Duvvuri

Satya Ranjan Mohanty

Yuri Tsier

Saurabh Jain

Shekher Bulusu

Palani Chinnakannan

Hrishikesh Narasimhan

Mrinmoy Ghosh

Herman Levenson

Luc Andre Burdet

Parag Bhide

Bertrand Duvivier

Sukhesh Halemane

Palathingal Frank

Vijay Gopal Krishnan

Prasad Sreedharan Nair

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

Systems and methods for subscription based selective EVPN route distribution

Disclosed are systems, apparatuses, methods, and computer-readable media for secure network routing. A method includes: receiving, at a network node, an advertisement message for a network route including an IP address prefix; receiving, at the network node, a route origin authorization associated with the IP address prefix, the route origin authorization including a digital signature and a security requirement of a route to a destination that corresponds to the IP address prefix; determining, by the network node, one or more network nodes satisfies the security requirement to yield a determination; and determining, by the network node, to route network traffic to the IP address prefix based on the determination. In one example, the method can include, when the one or more network nodes satisfies the security requirement, advertising the route to the one or more network nodes that satisfies the security requirement.

Advertising BGP destination secure path requirement in global internet

According to some embodiments, an Ethernet Virtual Private Network (EVPN) includes a first router configured as an Internet Group Management Protocol (IGMP) version 3 querier and a second router configured as an IGMP version 2 querier. The second router is configured to receive a Selective Multicast Ethernet (SMET) route message generated by the first router. The SMET route message includes an IGMP version 3 join request from a receiver, and the IGMP version 3 join request includes an address of a multicast source device. The second router is further configured to convert the IGMP version 3 join request of the SMET route message to an IGMP version 2 join request. The second router is further configured to send multicast traffic from the multicast source device to the receiver via the first router.

Systems and methods for supporting mixed IGMP querier versions

Apparatuses and methods are provided in which a CE protocol communication session is established, at a first provider edge network device (PE), for customer equipment device (CE) multi-homed to the first PE and one or more second PEs. The first PE is an owner of the CE protocol communication session. The first PE signals to the one or more second PEs an ownership message indicating that the first PE is the owner of the CE protocol communication session. The ownership message includes parameters that enable one or more second PEs to install in their respective forwarding tables a redirect policy to instruct the respective PE to forward packets of this session to the first PE via an overlay segment. The first PE receives the packets of the session via the overlay segment based on the ownership message.

Optimizations for PE-CE protocol session handling in a multi-homed topology

A communication pathway between a plurality of network nodes within a network is established. A DIS election operation is executed to determine a first network node among the plurality of network nodes as the DIS for the network and creating a first pseudo node for the first network node, and with each network node of the plurality of network nodes, determining whether the connectivity between the first network node and the other network nodes of the plurality of network nodes within the network is in a synchronous state with the adjacencies with the other network nodes of the plurality of network nodes within the network.

Designated intermediate system (DIS) priority changing

A method is performed by a network controller. The method includes receiving information that defines a topology of a network having Ethernet Segments configured with virtual local area networks (VLANs) and including provider edges that are multi-homed to customer edges. The method further comprises, based on the topology, determining for the VLANs particular provider edges among the provider edges that are to operate as designated forwarders of traffic for the VLANs, such that the VLANs are load balanced across the particular provider edges. The method also includes programming the particular provider edges as the designated forwarders of traffic for the VLANs.

Controller driven designated forwarder election in EVPN networks for optimized load distribution

A communication pathway between a plurality of network nodes within a network is established. A DIS election operation is executed to determine a first network node among the plurality of network nodes as the DIS for the network and creating a first pseudo node for the first network node, and with each network node of the plurality of network nodes, monitoring connectivity between the first network node and the other network nodes of the plurality of network nodes within the network, and monitoring adjacencies with the other network nodes of the plurality of network nodes within the network. Whether the connectivity between the first network node and the other network nodes of the plurality of network nodes within the network is in a synchronous state with the adjacencies with the other network nodes of the plurality of network nodes may be determined.

First and second egress nodes are each multi-homed to a customer edge (CE) that participates in virtual routing and forwarding (VRF). First forwarding information is configured on the first egress node. The first information includes VRF labels and defines forwarding of traffic based on the VRF labels and a status of a primary path to the CE. The VRF labels include a per-VRF label for the VRF and a per-CE label for the CE. Second forwarding information is configured on the second egress node. The second forwarding information includes the per-VRF label and the per-CE label, and defines traffic forwarding based on the VRF labels. Upon receiving traffic for the CE that carries the per-VRF label, the first egress node determines the status of the primary path, and forwards the traffic to either the CE over the primary path or to the second egress node, depending on the status.

Methods to improve ECMP for BGP services and BGP for provider edges with hybrid label distribution

In one embodiment, an authoritative edge device (AED)-server in a computer network maintains assignment of an active AED for a particular virtual local area network (VLAN), and in response to a triggered re-assignment, sends an AED change request identifying an old active AED for the particular VLAN and a new active AED for the particular VLAN (e.g., and/or corresponding backups). In response to receiving the change request, the old active AED ceases forwarding of traffic for the particular VLAN and transmits a relinquishment confirmation into the network. Also, in response to receiving the change request and the relinquishment confirmation from the old active AED, the new active AED assumes responsibility for traffic forwarding for the particular VLAN and transmits an activation confirmation into the network. The change request is then deemed completed by the AED-sever upon receipt of both the relinquishment confirmation and the activation confirmation.

Centralized management of authoritative edge devices

The present disclosure provides Border Gateway Protocol route aggregation in a Clos fabric when one or more communication failures are detected. A method includes receiving a prefix component of a first aggregate route from a first next hop node, the prefix component being associated with a failed network element; announcing, to one or more neighboring nodes, the first aggregate route along with the prefix component and the first next hop node associated with the failed network element; identifying, by the one or more neighboring nodes, a second aggregate route, the second aggregate route being a shortest aggregate route that contains the first aggregate route; and generating, from the second aggregate route, one or more Chad routes to the prefix component of the first aggregate route, wherein the one or more Chad routes are associated with one or more next hop nodes that are different from the first next hop node.

BGP aggregation in Clos networks

In one embodiment, a network controller identifies a first sign of life for an edge device in a communication network (e.g., when the network controller receives an encapsulated workflow request for the edge device over a control plane of the communication network). The network controller further imports the encapsulated workflow request from the edge device over the control plane, determines configuration parameters for a tenant and a tenant network from the encapsulated workflow request, and transmits the configuration parameters to the edge device to provision the edge device for the tenant according to the configuration parameters.

Auto-provisioning edge devices in a communication network using control plane communications

Growing community of inventors

Milpitas, CA, United States of America

Dhananjaya Rao