Cisco Technology, Inc.

Ed Kern

Keyur Patel

Burjiz F Pithawala

Carlos M Pignataro

Alvaro E Retana

Joel Abraham Obstfeld

Roque Gagliano

Anoosh Hosseini

Daniel Bourque

In an embodiment, presenting computer datacenter information comprises a server computer system that is coupled to a plurality of internetworking devices. The plurality of internetworking devices is configured to emit device location information. The server computer system receives the device location information from one or more internetworking devices, where the device location information is based on a particular proximity to a mobile computing device. The server computer system determines a geo-location and proximity of the mobile computing device relative to the one or more internetworking devices. The server computer system then selects device related information for a particular internetworking device, of the one or more internetworking devices, that has closest proximity to the determined geo-location of the mobile computing device. The server computer system then modifies a level of detail of the device related information based upon proximity of the mobile computing device and the particular internetworking device. The server computer system presents the device related information for the particular internetworking device, to the mobile computing device. In other embodiments, the invention encompasses a computer-readable medium configured to carry out the foregoing steps.

Augmenting network device management

In one embodiment, a router located at an exit edge of an autonomous system (AS) receives a data packet in a data plane, and determines a destination of the data packet and an associated AS-path information to the destination. The router may then insert the AS-path information into the data packet, and forwards the data packet with the AS-path information toward the destination, such that a receiving device in a destination AS can validate whether the data packet was routed through a path that was secure from a control plane perspective based on a collection of one or more insertions of AS-path information.

Tying data plane paths to a secure control plane

In one embodiment, an edge router receives an update message from a neighboring EBGP edge router, creates a modified origin validation state extended community, prepares a modified update message by attaching the modified origin validation state extended community to the update message, and sends the modified update message to a route reflector. The route reflector receives the modified update message, performs a prefix origin validation and a path validation based on the information contained in the modified update message, prepares a validation message based on the prefix origin validation and path validation, and sends the validation message to the edge router and to all other neighboring IBGP edge routers. The edge routers receive the validation message from the route reflector, parse the validation message, and inherit a validation state parsed from the validation message.

Performing offline BGP prefix origin and path validation at route reflectors

Growing community of inventors

San Jose, CA, United States of America

Ed Kern