Cisco Technology, Inc.

Graham Bartlett

Robert Edgar Barton

Kyle Mestery

Patrick Grossetete

Amjad Sayedrasul Inamdar

Frederic Detienne

Laurent Aubert

Techniques are described to provide efficient protection for a virtual private network. In one example, a method is provided that includes obtaining a packet at a first network entity; determining that the packet is a packet type of an authentication type; determining whether authentication content for the packet matches known good criteria for the packet type of the authentication type; based on determining that the authentication content for the packet does not match the known good criteria, performing at least one of dropping the packet and generating an alarm; and based on determining that the authentication content for the packet does match the known good criteria, processing the packet at the first network entity or forwarding the packet toward a second network entity.

Efficient protection for a virtual private network

A method is described and in one embodiment includes identifying at an initiator element a list of Internet protocol ('IP') prefixes corresponding to routes designated as interesting routes, wherein the IP prefixes are included in a Routing Information Base ('RIB') of the initiator; monitoring the RIB for a change in the list of IP prefixes; and, responsive to detection of a change in the list of IP prefixes, injecting at least a portion of the changed list of IP prefixes into a payload of an IKEv2 NOTIFY message and sending the IKEv2 NOTIFY message to a responder element peered with the initiator element, wherein the responder element updates an RIB of the responder element using the IP prefixes included in the received IKEv2 NOTIFY message.

Providing dynamic routing updates in field area network deployment using Internet Key Exchange v2

Growing community of inventors

Plymouth, United Kingdom

Graham Bartlett