Cisco Technology, Inc.

Horia Miclea

Mark Grayson

Francois Le Faucheur

Brian Eliot Weis

Fabio Rodolfo Maino

George Swallow

Ziv Nuss

Ornan Alexander Gerstel

John William Evans

Vina Ermagan

Ruben Gerald Lobo

Simon James Trevor Spraggs

High-level network policies that represent a virtual private network (VPN) as a high-level policy model are received. The VPN is to provide secure connectivity between connection sites of the VPN based on the high-level network policies. The high-level network policies are translated into low-level device configuration information represented in a network overlay and used for configuring a network underlay that provides the connections sites to the VPN. The network underlay is configured with the device configuration information so that the network underlay implements the VPN in accordance with the high-level policies. It is determined whether the network underlay is operating to direct traffic flows between the connection sites in compliance with the high-level network policies. If it is determined that the network underlay is not operating in compliance, the network underlay is reconfigured with new low-level device configuration information so that the network underlay operates in compliance.

Dynamic VPN policy model with encryption and traffic engineering resolution

In one example embodiment, a Self Organizing Network (SON) element is provided to communicate with at least one Long-Term Evolution (LTE) wireless network and at least one transport communication network. The SON element is operative to obtain information that relates to updated Neighbor Lists from a plurality of enodeBs (eNBs) belonging to the at least one LTE wireless network, and to convey information that relates to the updated Neighbor Lists obtained, to at least one managing entity belonging to the transport communication network.

System, method, and apparatus for incorporating a centralized self organizing network (SON) in a network

A method is provided in one example embodiment and includes identifying an Internet protocol (IP) address for a serving gateway; establishing a link between the serving gateway and a congestion notification element; monitoring packets in order to identify whether a differentiated services code point (DSCP) bit has been set in the packets; determining that a threshold associated with congestion in a network has been exceeded; and communicating a signal to the serving gateway associated with the congestion. The serving gateway can be configured to correlate the congestion with identifiers associated with end users operating in the network, where the serving gateway communicates a signal to a network element to reduce the congestion.

System and method for managing congestion in a network environment

In one embodiment, an access node of a network may receive a message that is destined for a particular address. The access node can determine that it does not have a border gateway protocol (BGP) label switched path (LSP) mapped for the particular address. The access node can further trigger an aggregation node to update outbound route filtering (ORF) to permit advertisements for the particular address. In response to the updated ORF of the aggregation node, the access node can receive via advertisements a BGP forwarding equivalent class (FEC) for an LSP mapped to the particular address. The access node can further transmit messages destined for the particular address from the access node to a subsequent node of the LSP according to the BGP FEC for the LSP.

Self-organizing and scalable MPLS VPN transport for LTE

To protect a multicast data stream for a multicast group, two P2MP pseudowires are established to deliver multicast data for the particular multicast group to an aggregation node. The two P2MP pseudowires are defined such that the pseudowires have no transport nodes in common other than the aggregation node. The aggregation node replicates data received via a primary pseudowire of the two P2MP pseudowires to subscribers of the multicast group. The aggregation node monitors the data from the primary pseudowire to detect failures in the data flow. When a failure is detected in the primary data stream, the aggregation node replicates data received via a secondary pseudowire of the two P2MP pseudowires for delivery to the multicast group subscribers.

Multicast-only fast re-route processing for point-to-multipoint pseudowire

Techniques are provided to automatically configure packet based network services over Dense Wavelength Division Multiplex (DWDM) network communication links. An optical wavelength is detected at an optical interface of a network device configured to send traffic between a packet switched network and an optical network. A message is sent to an optical control plane comprising information configured to request optical configuration information for the optical wavelength. A response to the message is received comprising the optical configuration information and the wavelength is activated at the optical interface using the optical configuration information. A frame is received over the wavelength that is formatted according to an optical protocol. Packet switched network information is extracting from an overhead portion of the frame that is configured to identify network parameters for configuring a packet switched network link and the associated routing. The packet switched network link is configured using the network parameters.

Growing community of inventors

Epalinges, Switzerland

Horia Miclea