Cisco Technology, Inc.

Eshwar Rao Yedavalli

Umamaheswararao Karyampudi

Govind Prasad Sharma

Mohammed Javed Asghar

Swapnil Mankar

Ashwath Kumar Chandrasekaran

Alexander Clemm

L Alexander Clemm

Javed Asghar

Sridhar Vallepalli

Jung Sauw Tjong

Shrawan Chittoor Surender

Prabhu Balakannan

Poon K Leung

Zbigniew W Blaszczyk

Srinivas Gaddam

Ashwin Ramani

Sudhir Thombare

In one embodiment, systems and method for detecting the intent of a connected optics/cable to operate in either a breakout mode or a non-breakout mode are provided. When a optics/cable is used to connect a port of a spine node to ports of one or more leaf nodes, initially both the spine node and the leaf nodes may automatically configure themselves to operate in breakout mode depending on the optics. Later, the spine node and one or more leaf nodes may exchange speed and optics information using a link layer discovery protocol or another protocol. If the exchanged speed and optics information indicates a mismatch, then the spine node or the leaf node may retain the breakout mode. If the exchanged speed and optic information do not indicate a mismatch, then the spine nodes and the leaf nodes may automatically re-configure themselves in non-breakout mode.

Systems and method for automatically configuring ports in breakout or non-breakout mode

Methods to secure against IP address thefts by rogue devices in a virtualized datacenter are provided. Rogue devices are detected and distinguished from a migration of an endpoint in a virtualized datacenter. A first hop network element in a one or more network fabrics intercepts a request that includes an identity of an endpoint and performs a local lookup for the endpoint entity identifier. Based on the lookup not finding the endpoint entity identifier, the first hop network element broadcasts a message such as a remote media access address (MAC) query to other network elements in the one or more network fabrics. Based on the received response, which may include an IP address associated with the MAC address, the first hop network element performs a theft validation process to determine whether the request originated from a migrated endpoint or a rogue device.

Endpoint security mechanism to detect IP theft on a virtual machine mobility in switch fabric

A method and apparatus for providing tenant specific encryption is described herein. According to an embodiment, a transmission site receives a data packet for transmission or forwarding. The transmission site determines, based on information in a header of the data packet, that the data packet is to be encrypted before transmission or forwarding. Using the information in the header, the transmission site identifies an encryption key for the data packet. The transmission site generates, for the data packet, an additional header and populates the additional header with a destination port number based on a destination port header value of the data packet. The transmission site overwrites the destination port header value of the packet with data indicating that the data packet is encrypted and then encrypts an encapsulated packet within the data packet using the encryption key prior to transmitting or forwarding the data packet. Upon receipt, the destination port header is used by the receiving site to determine that the packet is encrypted.

Tenant-specific encryption of packets carried in multi-cloud networks

A method and apparatus for creating management information specifications in a schema by a user. According to various embodiments of the method, a first file is defined by using a metaschema. The metaschema is represented in a schema definition format. Subsequently, a second file corresponding to the first file is defined. The second file includes directives for depicting various elements of a metaschema. The user is then prompted to fill various fields that correspond to the various elements of the metaschema. As a result, the management information specifications are included in a document corresponding to the metaschema. The management information specifications in the document are then converted to form the management information specifications into a metaschema document. The metaschema document represents a schema. The schema includes the management information specifications.

Method and system for creating management information base specifications

A method for managing packet voice networks conforming to ITU Recommendation H.323, using a virtual entity approach and abstract information model approach, is disclosed. A virtual zone object represents an association of a virtual gateway, which comprises an H.323 gateway and a signaling controller, and one or more associated virtual gatekeepers, each of which comprises an H.323 gatekeeper, or the combination of an H.323 gatekeeper and a route server. User input specifies a configuration operation on the virtual zone and one or more parameter values. One or more configuration instructions are automatically issued to both the gateway and the gatekeeper, and other involved objects representing other involved network elements, resulting in configuring both the gateway and the gatekeeper as specified in the user input. As a result, a user can configure or operate on a virtual zone or other virtual object as an atomic entity, for example, in a network management application, without involvement in complicated details of the actual network devices that provide a particular packet voice service.

Managing packet voice networks using a virtual entity approach

Growing community of inventors

Fremont, CA, United States of America

Eshwar Rao Yedavalli