Arista Networks, Inc.

Kartik Chandran

Hugh Weber Holbrook

Francois Labonte

Dipankar Bhatt Acharya

François Labonté

Eswaran Baskaran

Sambath Kumar Balasubramanian

Adam James Sweeney

Simon Francis Capper

Feng Zhu

Chandrashekhar Appanna

Victor Wen

Sriram Chidambaram

Christoph Schwarz

Di Wang

Nicholas Tan

Wade Carpenter

Hemanth Murthy

Methods and systems for modifying network traffic data. The method of modifying network traffic data may include receiving a network traffic data unit by a switching engine; performing an analysis on the network traffic data unit to obtain network tunnel information; generating encryption information based on the network tunnel information; and securing the network traffic data unit, by an encryption engine, based on the encryption information.

In-line encryption of network data

A command line interface in a network device provides for specifying Virtual Local Area Network (VLAN) tag manipulations using range mappings to avoid error-prone repetitive configuration. A flexible VLAN tag range mapping is described, where the original and transformed ranges can be specified for both inner and outer positions, as long as the number of tags on either side of the transformation is the same.

Mapping virtual local area network (VLAN) tags

Each switch unit in a networking system shares its local state information among other switch units in the networking system, collectively referred to as the shared forwarding state. Each switch unit creates a respective set of output queues that correspond to ports on other switch unites based on the shared forwarding state. A received packet on an ingress switch unit operating in accordance with a first routing protocol instance can be enqueued on an output queue in the ingress switch; the packet is subsequently processed by the egress switch unit, operating in accordance with a second routing protocol instance that corresponds to the output queue.

Networking system having multiple components with multiple loci of control

Methods and systems for modifying network traffic data. The method of modifying network traffic may include receiving a network traffic data unit that includes an identifier, at a proxy port; based on the identifier, performing a proxy port action set to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit towards an egress port.

Proxy ports for network device functionality

A method and apparatus of a network element that updates an interface list of a multi-link group of a network element is described. In an exemplary embodiment, a network element receives an indication that the interface list for the multi-link group on a network element is to change. In addition, the interface list includes a first set of interfaces. The network element further includes an address table having a plurality of address entries, where each of the plurality of address entries includes an address, a multi-link nexthop, and a tag group reference. The tag group reference references an entry in a tag group table, where a tag group entry includes a tag group identifier and a tag group set of interfaces. The network element further receives a second set of interfaces. The network element additionally updates the interface list for the tag group entry to include a second set of interfaces. Furthermore, the network element transmits data with the multi-link group using the second set of interfaces.

Updating interface list of multi-link group

Growing community of inventors

Los Altos, CA, United States of America

Kartik Chandran