Avaya Technology LLC

Makarand Kale

Srinivas Chaganty

Satish Bommareddy

Sathish Bommareddy

A firewall fault-tolerant network interface system includes a switch circuit configured to detect when a firewall fails in a multi-firewall local network. When a failed firewall is detected, the switch circuit waits for a time-out period to expire to allow convergence. The switch circuit then intervenes when traffic from a server to the failed firewall is detected. The switch circuit translates the MAC address of the failed firewall to the MAC address of a functional firewall. Traffic from a server originally directed to the failed firewall is then redirected to a functional firewall. In a further refinement, the switch circuit provides the MAC address of a functional firewall in response to an ARP request from a server to the failed firewall. Thus, traffic from this server will be directed to the functional firewall without further intervention, reducing the overhead of the switch circuit. In still a further refinement, if the failed firewall recovers, the switch circuit waits for a time-out period to expire to allow convergence of external firewalls and to allow the recovered firewall to learn routes to known clients. The switch circuit then ceases all intervention for the MAC address of the now-recovered firewall.

Firewall pooling in a network flowswitch

A firewall clustering system connects two or more firewalls between an internal network and an external network. The plurality of two or more firewalls are combined to supply high-availability and scaling of processing capacity. Firewalls maintain client-server state information. Flow controllers are connected to the firewalls and placed on both the internal 'trusted' side and the external 'untrusted' side of the firewalls. Flow controllers are placed on both sides of the firewalls to ensure that traffic for a given client-server session flows through the same firewall in both inbound and outbound directions. The firewalls perform filtering operations and/or network address translation (NAT) services. In both cases, the flow controllers supply high availability, scalability, and traffic distribution for the firewalls in the firewall cluster.

Firewall clustering for multiple network servers

A router clustering system connects two or more routers to a one or more distinct Internet Service Providers (ISPs) in a complete high-availability arrangement. Typically the two or more routers connect to a plurality of ISPs at a site so that an outage of one ISP does not affect connectivity and availability to the site. The router clustering system typically includes a plurality of clustering units for redundancy that avoids difficulties that arise with a single point of failure. For example two clustering units may be used in an active-passive high-availability configuration. A router cluster creator creates or configures a router cluster. To create a router cluster, an administrator assigns to the cluster a logical Internet protocol (IP) address IPgw and specifies routers that are members of the cluster.

System and method for routing message traffic using a cluster of routers sharing a single logical IP address distinct from unique IP addresses of the routers

A VPN device clustering system connects two or more VPN devices on one side of a virtual private network to a similarly clustered system of two or more VPN devices on the other side of a virtual private network. The VPN device clustering system typically includes a plurality of clustering units for redundancy that avoids difficulties that arise with a single point of failure. For example two clustering units may be used in an active-passive high-availability configuration. A VPN device cluster creator creates or configures a VPN device cluster. To create a VPN device cluster, an administrator assigns to the cluster a logical Internet protocol (IP) address IPvpn and specifies VPN devices that are members of the cluster.

Growing community of inventors

Sunnyvale, CA, United States of America

Makarand Kale