Cisco Technology, Inc.

Apple Inc.

Kyphon Sarl

Roku, Inc.

Michael R Smith

Joshua P De Cesare

Dallas Blake De Atley

Ali Golshan

John Andrew Wright

Jeffrey Ym Wang

Shantonu Sen

Matthew Reda

Navindra Yadav

Norman William Finn

James Neil Guichard

Paul M Quinn

Surendra M Kumar

Michael Fine

Faisal Mushtaq

David Delano Ward

Nagaraj Bagepalli

Bernard Joseph Semeria

Saravanakumar Rajendran

Shreeram Bhide

Dileep Kumar Devireddy

Mark Alan Bakke

David John Miller

Anusankar Elangovan

Douglas Alan Gourlay

Wilson Kok

Padmanabha Nallur

Sitaram Dontu

Erika I Palmer

Jeffrey Y M Wang

Steve Mouw

Thomas James Edsall

Pradeep Kumar Kathail

Krishna Doddapaneni

Prashant Gandhi

Chandrashekhar Appanna

Kit Chiu Chu

Satyam Sinha

Udayakumar Srinivasan

Sameer Merchant

Jeffrey Alan Bush

Ajit Sanzgiri

Francisco M Matus

Jerry Hauck

Awais Bin Nemat

John Knight

Srinivas Sardar

Gyaneshwar S Saharia

Paul Fazzone

Marcus A Maranhao

Narender Enduri

Hemant K Hebbar

Shankar Ramachandran

Rohit Shrivastava

Ana H Burghelea

Chidambareswaran Raman

David P Thompson

Michael F Culbert

Roger Antoine Karam

Dipankar Bhattacharya

Timothy J Kuik

Praveen Jain

Munish Mehta

Vijay K Chander

Eric J Albert

Joji Thomas Mekkattuparamban

Jimmy Philip Ervin

Saurabh Jain

Paul Harry Gleichauf

Sanjeev Debdutta Rampal

Gaetano Borgione

Kevin D Morishige

Venkatesh Janakiraman

Neelima Mehta

Karthikeyan Gurusamy

Atul Rawat

Shriram Velaga

Lilian Sylvia Fernandes

Simon Patience

Badhri Madabusi Vijayaraghavan

Eden Tan

Nelson B D'Souza

Siva Prasad Donthamsetty

Kulkarni Hrishikesh Vishwas

Srinath Mohanraj

Van Lieu

Sitaram Dontn

Manoj T Narayanan

Vinayakumar V Parameswarannair

Richard Jørgensen

Neil Kraewinkels

Yavindra Yadav

Paul Anthony Fazzone

Nagaraj A Bagepalli

Sheeram Bhide

Mushtaq Faisal

Disclosed herein are system, apparatus, article of manufacture, method and/or computer program product embodiments, and/or combinations and sub-combinations thereof, for a wireless media system including a wireless speaker device and a host device forming a peer-to-peer wireless network. The host device provides audio content to the speaker device, and the speaker device can decode and process the audio content received from the host device. The speaker device can be in various states that consume different level of powers, such as a standby state, a wake state, a connected state. The speaker device can determine the host device is in an inactive state or an active state. When the speaker device determines the host device is in an inactive state, the speaker device can enter the standby state, enable the communication circuit and the audio processing circuit of the speaker device to be in a low power state to save power.

Power control for speaker devices in a wireless media system

In one embodiment, a method includes receiving data at a virtual switch located at a network device in a cloud network. The data is received from an external network and destined for one or more virtual machines located in the cloud network and associated with the external network. The method further includes transmitting the data from the virtual switch to the virtual machines. The virtual switch operates as an access layer switch for the external network and creates a virtual switching overlay for secure communication between the virtual machines and the external network. Logic and an apparatus are also disclosed.

Virtual switching overlay for cloud computing

A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a ROM (read only memory) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

Securely recovering a computing device

Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.

Network fabric overlay

A method and system for best effort propagation of security group information is disclosed. The method includes determining if a reserved group identifier is associated with a destination and, if the reserved group identifier is associated with the destination, indicating that a packet received at a network node can be sent to another network node. The packet includes destination information that identifies the destination as a destination of the packet.

Method and apparatus for best effort propagation of security group information

Techniques are provided to decouple service chain structure from the underlying network forwarding state and allow for data plane learning of service chain forwarding requirements and any association between services function state requirements and the forward and reverse forwarding paths for a service chain. In a network comprising a plurality of network nodes each configured to apply a service function to traffic that passes through the respective network node, a packet is received at a network node. When the network node determines that the service function it applies is stateful, it updates context information in a network service header of the packet to indicate that the service function applied at the network node is stateful and that traffic for a reverse path matching the classification criteria is to be returned to the network node.

Data plane learning of bi-directional service chains

A virtual network device includes several different virtual network device sub-units, which collectively operate as a single logical network device. An interface bundle includes interfaces in more than one of the different virtual network device sub-units included in the virtual network device. The interface bundle is coupled to a virtual link bundle, which connects the virtual network device to another device. The interface bundle is managed as a single logical interface.

Interface bundles in virtual network devices

A method and apparatus for providing network security using role-based access control is disclosed. A network device implementing such a method can include, for example, an access control list. Such an access control list includes an access control list entry, which, in turn, includes a user group field. Alternatively, a network device implementing such a method can include, for example, a forwarding table that includes a plurality of forwarding table entries. In such a case, at least one of the forwarding table entries includes a user group field.

Method and apparatus for providing network security using role-based access control

Systems, methods, and computer-readable storage media are provided for dynamically setting an end point group for an end point. An endpoint can be assigned a default end point group when added to a network. For example, the default end point group can be a baseline port/security group which is considered an untrusted group. The end point can then be dynamically assigned an end point group based on a set of group selection rules. For example, the group selection rules can identify an end point group based on the MAC address or other attributes. When the end point is added to the network, the MAC address and/or other attributes of the end point can be determined and used to assign an end point group. As another example, an end point group can be assigned based on the amount of traffic or guest operation system.

Dynamic attribute based application policy

A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a read only memory (ROM) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

An adjunct network device includes several ports, an uplink interface, and an adjunct forwarding engine coupled to the ports and the uplink interface. A first port is configured to receive a packet, which includes a destination address. The adjunct forwarding engine is configured to send the packet to the uplink interface if the destination address is not associated with any of the ports. The packet is sent to one of the ports if the destination address is associated with the one of the ports.

Determining when to switch to a standby intelligent adjunct network device

A method and apparatus for including network security information in a frame is disclosed. Network security information is included in a secure portion of overhead of a frame. The network security information is configured to facilitate network security. A network device configured to process a frame is also disclosed. The frame includes frame security information and network security information. The frame security information is configured to facilitate securing a portion of overhead of the frame, and the network security information is located in the secure portion of the overhead of the frame and is configured to facilitate network security.

Method and system for including network security information in a frame

Presented herein are techniques useful in a network comprising a plurality of network nodes each configured to apply one or more service functions to traffic that passes through the respective network nodes. A network node receives packets encapsulated in a service header that includes information defining a first set of context headers stacked into an association of metadata that is relevant to one or more service functions within a service path comprised of one or more network nodes. The network node performs at least one of the service functions in the service path and rewrites the service header with a second set of context headers. The second set of context headers include metadata derived from performing the service function(s) at the network node.

Stacking metadata contexts for service chains

Growing community of inventors

San Jose, CA, United States of America

Michael R Smith