Extreme Networks, Inc.

Cisco Technology, Inc.

Donald Bruce Grosser, Jr

Edward Joel Rovner

Shankara Ramamurthy

Michael D Mroz

Olen L Stokes

Patrick A Bosa

Hood L Richardson, Jr

Chun Zhang

John Kevin Frick

Markus Nispel

Jeffrey Allen Ford

Vanitha Neelamegam

Maruthamuthu Palani

Balasubramanian Ramu

Kannan Selvaraj

Richard W Graham

Michael Yip

Cedell Adam Alexander, Jr

Leo Temoshenko

Prakash Kashyap

Sunil Praful Shah

Cedell A Alexander

Arnel Lim

Gregg William Miller

Desikan Saravanan

Charles Frederick Burton, Iii

Daniel Wade

Olen Lee Stokes, Jr

Daniel Lynn Schweitzer

Tony Wang

Junjie Ma

Scott M Hubbard

Kesavan Thiruvenkatasamy

Charles E Hudnall, Jr

Rana Dayal

Sumit Garg

Gorden Jennings

Jeffrey L Barnhill

Yarnin Israel

Girish Kumar Karunagaran

Shangquan Wen

Louis A Dernosek

Justus W Gries

Jim Pan

Ki-Hong Park

Manpreet S Sandhu

Jeffrey A Ford

Daniel V Wade

Disclosed herein are system, method, and computer program product aspects for generating a virtual replica of a physical network. An aspect operates by receiving, from a network management system (NMS), a request to generate a network digital twin (network-DT) instance corresponding to a physical network that includes a plurality of physical network devices, where the request includes link connectivity information corresponding to the physical network and a respective plurality of device characteristics corresponding to each of the plurality of physical network devices. A plurality of device digital twin (device-DT) instances are generated, each corresponding to a respective physical network device of the plurality of physical network devices, where each device-DT instance of the plurality of device-DT instances is generated based on the respective plurality of device characteristics corresponding to the respective physical network device. The network-DT instance is generated based on the plurality of device-DT instances and the link connectivity information.

Method and apparatus to create a virtualized replica of a computer network

Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Systems and methods for determining flow and path analytics of an application of a network using sampled packet inspection

The subject matter described herein includes methods, systems, and computer readable media for advanced distribution in a link aggregation group (LAG). In some examples, a packet forwarding device includes physical ports for sending and receiving network traffic. The packet forwarding device includes one or more packet processors configured to perform LAG distribution by distributing incoming packets across active links of a first LAG formed between the packet forwarding device and one or more network devices. The incoming packets are in route to a destination device in communication with one of the network devices. The packet processors are configured, in an advanced distribution mode, to transmit a first packet of the plurality of incoming packets for the first LAG over a selected active link selected from a subset of the plurality of active links for the first LAG.

Methods, systems, and computer readable media for advanced distribution in a link aggregation group

Systems and methods are disclosed herein for determining that a diagnostic mode is enabled for a port of a switch, the port being part of a VLAN, and responsively designating a port of the plurality of ports as a loopback port, where a packet transmitted on the loopback port is forwarded according to an entry of a forwarding database. The disclosure further describes generating a layer 2 multicast index comprising an entry for the port and an entry for the loopback port, programming the forwarding database with an entry for a destination address of the switch pointing to the layer 2 multicast index, generating a diagnostic packet, and transmitting the diagnostic packet on the loopback port. Additionally, the disclosure describes determining that the diagnostic packet is received by any port of the plurality of ports, and responsively determining a network problem exists and causing a diagnostic protocol to be executed.

Systems and methods for hardware-implemented anomaly detection in VLAN network using loopback port

A switching device supports a mixed mode of operation using both layer 2 and layer 3 multicast forwarding tables for multicast forwarding of packets. In the mixed mode of operation the switching device programs multicast forwarding entries in a corresponding layer 2 or layer 3 table depending on a type of protocol to be used for multicast forwarding. The switching device programs multicast forwarding entries in the layer 3 table for multicast packets forwarded using layer 3 routing protocols, and in the layer 2 table for multicast packets forwarded using layer 2 protocols. The switching device converts layer 3 multicast information to layer 2 multicast information before programming multicast forwarding entries in the corresponding layer 2 table.

Apparatus and method for multicast data packet forwarding

A network comprises a plurality of switches coupled in a ring topology, wherein each adjacent pair of switches in the plurality of switches forms a multiple link aggregation group interswitch connection therebetween and forms a ring resiliency protocol logical node. A first switch in a first adjacent pair of the plurality of switches is coupled via a first link to a second switch in a second adjacent pair of the plurality of switches, and a third switch in the first adjacent pair is coupled via a second link to a fourth switch in the second adjacent pair. In the event of a failure of the first link, a packet flow to be transmitted from the first switch over the first link is redirected from the first switch to the third switch for transmission over the second link to the fourth switch. However, in the event of a concurrent failure of the first link and the second link, a ring resiliency protocol reconfigures the ring topology such that a packet flow to be transmitted via the failed links is redirected to a fifth switch in a third adjacent pair via a third link.

Apparatus and method for network ring resiliency, availability and performance

Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

Methods systems and apparatuses for dynamically tagging VLANs

A system for providing at least one node of an n-node multi-switch link aggregation group (MLAG) includes a packet forwarding device for receiving a packet destined for at least one n-node MLAG, n being an integer greater than 2. The packet forwarding device includes a packet forwarding database for storing packet forwarding rules for the at least one n-node MLAG. The packet forwarding device further includes a processing element for forwarding, blocking forwarding of, or redirecting the packet in accordance with one of the packet forwarding rules defined for the n-node MLAG group in the packet forwarding database.

Methods, systems, and computer readable media for providing N-node multi-switch link aggregation groups (MLAGs)

A switching device receives a data packet and searches for a layer 3 multicast destination address specified in a header of the received data packet in a layer 3 multicast forwarding database table. The switch searches for a corresponding port list in a layer 3 egress table if the layer 3 multicast destination address is found. However, if the layer 3 multicast destination address is not found, the switch searches for a layer 2 destination address specified in header of the received data packet in a layer 2 multicast forwarding database table, and the switch searches for a port list in a layer 2 egress table if the layer 2 destination address is found. If neither the layer 3 or layer 2 destination address is found in the searches, the switch discards or floods the received data packet out all ports of the switching device.

Methods, systems, and computer readable media for improved multicast scaling through policy based redirection are disclosed. According to one method, a packet belonging to an Internet protocol multicast (IPMC) stream is received, where the packet includes packet routing information. A lookup is performed in a IPMC forwarding database (FDB) and, in response to failing to locate an entry in the IPMC FDB, an attempt is made to insert the packet routing information in the IPMC FDB. In response to failing to insert the packet routing information in the IPMC FDB, a packet redirection rule is created based on the packet forwarding information.

Methods, systems, and computer readable media for improved multicast scaling through policy based redirection

The subject matter described herein includes methods, systems, and computer readable media for improved multi-switch link aggregation group (MLAG) convergence. According to one aspect of the subject matter described herein, a system for improved multi-switch link aggregation group (MLAG) convergence is provided. The system includes a packet forwarding device. The packet forwarding device includes a packet processor for receiving a packet and determining that the packet is destined for a port of the packet forwarding device associated with an MLAG group. The packet forwarding device further includes an MLAG module associated with the packet processor for determining that the port is inactive, and in response to determining that the port is inactive, performing a convergence operation, wherein the convergence operation includes redirecting, using a redirection filter, the received packet towards an active port associated with the MLAG group.

Methods, systems, and computer readable media for improved multi-switch link aggregation group (MLAG) convergence

Methods, systems, and computer program products for selective layer 2 port blocking using layer 2 source addresses are disclosed. According to one method, a layer 2 frame is received. An I/O port block list is identified based on a layer 2 source address in the layer 2 frame. A set of ports to which the layer 2 fame should be forwarded is identified. The frame is blocked from being forwarded to ports in the set that are also in the I/O port block list.

Methods, systems, and computer program products for selective layer 2 port blocking using layer 2 source addresses

Growing community of inventors

Apex, NC, United States of America

Donald Bruce Grosser, Jr