Alcatel Lucent

Gregory G Page

Roberto H Jacob Da Silva

Joseph F Olakangil

Sindhu K Mohandas

Sahil P Dighe

Chiang Yeh

Eric W Tolliver

Abhishek Sinha

Anand Vinayagam

Ignatius D Santoso

Nalinakshan Kunnath

Lawrence Helmerich

Bryan J Dietz

Andrew Ferreira

Stephen Ralph Bates

Peter Paul Ott

Edgard Vargas

Chung-Hua Chang

Shaofu Wu

David Morgan

Stephen C Hanka

Bruce R Jones

Surajit Bhattacharya

Srinivas V Tyamagondlu

Robert Leon Sangorinz

Steven Clawson

Steve Larsen

Christopher Francis Ravenscroft

A network device within a data communication network includes a plurality of network interfaces, each programmed with a respective set of Address Resolution Protocol (ARP) routing entries for correlating network addresses with physical addresses. Each network interface is further programmed with an additional respective set of Longest Prefix Match (LPM) routing entries for correlating other network addresses with designated network interfaces to enable traffic matching one of the LPM routing entries to be forwarded to the appropriate designated network interface within the network device.

Distributed address resolution protocol forwarding

A virtual chassis system includes a plurality of network nodes configured with a master virtual chassis address. The network nodes are connected by virtual fabric link (VFLs) that provide a connection for exchange of packets between the network nodes. The packets include source MAC addresses and associated hardware device information, such as source chassis ID, source network interface identifier and source port identifier information. The network nodes use this information to maintain synchronized MAC address tables for forwarding of packets in the virtual chassis system.

System and method for a virtual chassis system

A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

Method and apparatus for network security

Aggregation Switches connected via a virtual fabric link (VFL) are each active and able to communicate via an inter-process communication (IPC) using an IPC Virtual Local Area Network (IPC VLAN). A sub-set of Customer-facing ports (CFPs) of each Aggregation Switch are coupled to the VFL and assigned to the IPC VLAN to enable communication therebetween.

Multi-chassis inter-process communication

Aggregation Switches connected via a virtual fabric link (VFL) are each active and each coupled to a multi-chassis link aggregate group (MC-LAG), which is assigned to a multi-chassis link aggregate group virtual local area network (MC-LAG VLAN). A virtual Internet Protocol (IP) interface is allocated to the MC-LAG VLAN and configured on both Aggregation Switches.

Virtual IP interfaces on multi-chassis link aggregates

A switch and a method are described herein that are capable of performing the following steps: (a) receiving the unicast packet which is a L3 routed packet at a port in a first Virtual Local Area Network (VLAN); (b) routing the received packet to a loopback port in a second VLAN; (c) receiving the routed packet which is now a L2 multicast packet from the loopback port in the second VLAN; and (d) bridging the routed packet to multiple ports in the second VLAN.

Multicasting unicast packet/multiple classification of a packet

A routing device and associated method for allocating the nodes of a multi-way trie of a forwarding routing table between two or more memory devices is disclosed. In the preferred embodiment, the routing device comprises a routing table for storing a plurality of routes in a multiway trie in a first memory for caching a first set of the plurality of trie nodes and a second memory for caching a second set of the plurality of trie nodes; and a route manager adapted to relocate one or more nodes of the second set from the second memory to the first memory such that the a utilization count for each of the nodes of the first memory is higher than each of the nodes of the second memory.

Optimization of routing forwarding database in a network processor

A switch and a method are described herein that are capable of supporting a 'new' IP network tunnel even though the switch has an 'old' application specific integrated circuit (ASIC) that did not originally support the routing of a packet with the &#x201c;new&#x201d; tunnel type (i.e., the &#x201c;new&#x201d; tunnel type was developed and implemented after the design of the &#x201c;old&#x201d; ASIC).

Switch and method for supporting internet protocol (IP) network tunnels

A multivariant, common basis classification method and apparatus for classifying protocol data units in a network switching device is disclosed. The method of classifying a protocol data unit (PDU) in the preferred embodiment includes the steps of generating a first string and a second string with which to characterize a PDU; mapping first and second strings into a first index and second index, respectively, where the first and second indices are selected from a plurality of indices; and selecting an instruction to apply to the PDU by matching the first and second indices. The plurality of strings are commonly generated from the source and destination address in the packet as well as other indicia with which to identify a traffic flow. The instructions specify how to classify, route, switch, or otherwise process the PDU.

Identifying QoS flows using indices

Growing community of inventors

Sandy, UT, United States of America

Gregory G Page