Verizon Patent and Licensing Inc.

Manish Srivastava

Sivanaga Ravi Kumar Chunduru Venkata

Raju Sharma

Ramesh Nadella

Kumara B Tamada

Raghu Rami Reddy Valisammagari

Kirk Campbell

Mahesh Chapalamadugu

Susmitha Hymasree Pulakhandam

Anuj Dutia

Vinod Ramalingam

Brian E Stephenson

Krishna Prakash Bhat

Prasad Deviprasad

Ajaykumar Kalla

Chris F Sefcik

Sreenivasa R Pokuri

Ravi Chunduru

Systems and methods described herein provide a co-managed configuration service. A network device stores parameters for the co-managed configuration service. The parameters identify exposed services for an enterprise network that uses devices from a network service provider. The network device receives, via a customer portal, a vendor-agnostic change request for the enterprise network. The change request includes a user role and a change request name for one of the exposed services. The network device authenticates the change request based on the user role and the change request name and retrieves vendor director information for an SDN device implementing the configuration change. The network device invokes, in response to the change request, the configuration change for the enterprise network based on the vendor director information.

Software defined network device exposure to third parties

A device monitors, for a software-defined networking wide area network (SD-WAN) deployment, a set of virtualized network services of the SD-WAN deployment, and applies a set of diagnostic tests to evaluate the set of virtualized network services. The device detects, based on monitoring the set of virtualized network services and in connection with applying the set of diagnostic tests, an event associated with a virtualized network service. The device analyzes, using an analytics model of SD-WAN operation, the event to identify an issue associated with the virtualized network service, and determines, based on the analytics model of SD-WAN operation, a recommendation relating to remediating the issue. The device generates an abstraction layer user interface to represent the set of virtualized network services and to convey the recommendation relating to remediating the issue, and implements, after providing the abstraction layer user interface, the recommendation to remediate the issue.

Virtualized network service management and diagnostics

Systems and methods described herein provide a network tool that discovers device configurations for selected enterprise sites and automatically organizes the data to assist users, so they can build intents for network function policies in enterprise networks. An intent builder performs device discovery of network function (NF) instances in a customer network; retrieves configuration elements from the NF instances; normalizes the configuration elements; and generates a graphical user interface with rule paths based on the configuration elements. The network device receives, via the graphical user interface, user input to map source Internet protocol (IP) addresses in the rule paths to a user label and to map destination IP address in the rule paths to an application label. Based on the user input, the network device presents, via the graphical user interface, consolidated intents and generates vendor-agnostic policy rules from the consolidated intents.

Intelligent and assisted intent builder

A customer premises device may include a memory configured to store day 0 configuration instructions, a first network interface to couple to an out-of-band network, a second network interface operatively coupled to a customer network, and at least one processor configured to automatically and without user input execute the day 0 configuration instructions. The at least one processor is configured to establish and maintain a secure tunnel connection with a security gateway device via the out-of-band network and to establish a connection with a configuration platform on the provider network via the secure tunnel connection. Orchestration instructions for configuring one or more VNFs are received from the configuration platform via the tunnel connection. The at least one processor is further configured to receive VNF management instructions via the secure tunnel connection, wherein the VNF management instructions include one of: updates, reconfigurations, or patches.

Method and system for secure zero touch device provisioning

Systems and methods described herein provide an assisted network change service. A network device stores a record of network resources for a customer network and generates, based on the record, a visual representation of the network topology for a selected site of the customer network. The network device receives, from the customer, input for a change to configuration parameters of one of the network resources and verifies if the change to the configuration parameters is compatible with other settings in the customer network. When the change to the configuration parameters is compatible with other settings in the customer network, the network device generates a change request based on the configuration parameters and invokes provisioning to implement the change request for the customer network.

Assisted and context-driven network changes

A device can receive virtual network function (VNF) data associated with multiple VNFs. The device can generate multiple configuration templates that are to be used by a network design tool that is capable of creating a design of a network for an organization. The device can receive, from a user device, object data associated with network design objects that have been added to or removed from the interface of the network design tool. The device can generate multiple VNF configuration files that allow two or more of the multiple VNFs to be supported by network devices associated with the organization. The device can perform actions associated with configuring two or more of the multiple VNFs onto the network devices to permit the network devices to utilize virtual resources while executing the two or more of the multiple VNFs.

Automatic configuration of virtual network functions

Systems and methods described herein provide unified policy management framework network functions in enterprise networks. The systems and methods store an abstract micro-service template configured from predefined configuration elements; receive descriptive information for a vendor-specific micro-service that corresponds to the abstract micro-service template; solicit first customer labels for at least some of the predefined configuration elements associated with a group of users for a micro-service on a customer network; solicit second customer labels for other of the predefined configuration elements associated with applications used on the customer network; generate a vendor-agnostic micro-service template using the first customer labels, the second customer labels, and the abstract micro-service template; convert, based on the descriptive information, the vendor-agnostic micro-service template into a vendor-specific micro-service template for the customer; and generate, based on the vendor-specific micro-service template, a network policy for enforcement across multiple sites of the customer network.

Intelligent programmable policies for network functions

A customer premises device may include a memory configured to store day 0 configuration instructions, a first network interface to couple to an out-of-band orchestration and management path, a second network interface operatively coupled to a customer network, and at least one processor configured to automatically and without user input execute the day 0 configuration instructions. The at least one processor is configured to establish and maintain a secure tunnel connection with a security gateway device via the out-of-band orchestration and management path and to establish a connection with a configuration platform on the provider network via the secure tunnel connection. Orchestration instructions for configuring one or more VNFs are received from the configuration platform via the tunnel connection. The at least one processor is further configured to receive VNF management instructions via the secure tunnel connection, wherein the VNF management instructions include one of: updates, reconfigurations, or patches.

Techniques described herein may be used to condense a large quantity of Virtual Network Function (VNF) chains (that each correspond to a network service) into a much smaller quantity of VNF records; and extract any of the large quantity of VNF chains from the smaller quantity of network service records. This may be accomplished by assigning a Number (No.) of Services attribute and a Tier attribute into each VNF record. The No. of Services attribute and Tier attribute may enable the VNF records to reference one another such that the larger quantity of VNF chains may, in effect, be entirely represented by the much smaller quantity of VNF records, thereby conserving storage space, streamlining VNF chain management, and reducing the processing and memory capacity required to search, configure, and deploy virtual network services.

Growing community of inventors

Frisco, TX, United States of America

Manish Srivastava