Extreme Networks, Inc.

Bay Networks, Inc.

Amlogic Co., Limited

Michael Yip

David K Parker

Yeeping Chen Zhong

Erik R Swenson

Stephen R Haddock

Christopher J Young

Shehzad T Merchant

Andrew H Smith

Justin N Chueh

Anna Berenberg

Qi Cao

Sunil Praful Shah

Desikan Saravanan

Steve Haddock

Michelle M Ragonese

Kenneth T Yin

Apoorva Bhatt

Michael Polo

Tao Guan

Donald Bruce Grosser, Jr

Edward Joel Rovner

Dongjian Wang

Xuyun Chen

Randy Ryals

Herb Schneider

Curt Berg

H Earl Ferguson

James Wanderer

Gururaj Singh

Daniel J Cimino

Matthew T Knudstrup

Jeff Prince

Siddharth Khattar

Brian W Bailey

Abhay Gidwani

Erik Rustan Swenson

Steve W Schroder

Brian Bunker

Aaron C Tyler

Leo Huber

Minxi Gao

Arthur Lin

Tash Hepting

Eric Knudstrup

Paul Anderson

Jing Na

Mark Thomas Lytwyn

Indranil Bagchi

Charles E Hudnall, Jr

Gordon MacKean

Edward Soloko

A method for calibrating an image capture device, comprises the steps of: applying lighting levels onto the image capture device; capturing luma values for the applied lighting levels; calculating luma gains for lens coordinates as a function of the applied lighting levels and the captured luma values, wherein each of the lens coordinates having multiple ones of the calculated luma gains; and storing the calculated luma gains to calibrate the image capture device.

Methods and systems for lens shading correction

A method and apparatus is provided to control the admission of a user to a network by preventing a port through which the user connects to the network from forwarding data packets until the user is authorized. A network login controller operates in conjunction with a user interface to receive a user identification data from the port user. The network login controller further operates in conjunction with an authorization server to authenticate the user by sending a user authentication request containing the user identification data to the authentication server. The network login controller grants or denies permission to the user to access the network based on the user authentication response from the authentication server. If permission is granted, then the network login controller unblocks the port through which the user is connected to place it in packet-forwarding mode. If permission is denied, then the port remains in packet non-forwarding mode (i.e. it remains blocked).

Method and apparatus for network login authorization

A system for statistically sampling packets is described. In this system, upon or after the occurrence of a predefined statistical event in relation to a packet, a pseudo-random value is obtained and compared to a predetermined threshold. Responsive to this comparison, the system selectively arranges to have the packet statistically sampled. A system for compiling statistics for packets undergoing processing by a packet processing system is described. In this system, upon or after the occurrence of a predefined statistical event in relation to a packet, a cumulative index for the packet is updated to reflect the current processing cycle for the packet. Upon or after completion of processing of the packet, whereupon the cumulative index may reflect more than one processing cycle, packet statistics are updated responsive to the cumulative index for the packet. A second system for compiling statistics for packets undergoing processing by a packet processing system is described. In this system, upon or after a predefined statistical event in relation to a packet, a partial statistics update request is queued. A statistics processor monitors the update requests in the queue for completion. Upon or after completion of a statistics update request, the statistics processor updates packet statistics responsive to the completed update request.

Systems for statistics gathering and sampling in a packet processing system

A processor readable medium storing a data structure for supporting one or more packet modification operations is provided. The data structure has a pointer to a sequence of one or more commands stored in a first memory area and implementing one or more packet modification operations. The data structure also has a pointer to a burst of one or more data or mask items stored in a second memory area for use by the one or more commands. A method of performing one or more packet modification operations on a packet is also provided. This packet is associated with a data structure link. In this method, a data structure corresponding to the data structure link is retrieved. This data structure has the format described above. A packet modification system utilizing a data structure having this format is also provided.

Data structures for supporting packet data modification operations

A packet processing system architecture and method are provided. According to a first aspect of the invention, a plurality of quality of service indicators are provided for a packet, each with an assigned priority, and a configurable priority resolution scheme is utilized to select one of the quality of service indicators for assigning to the packet. According to a second aspect of the invention, wide data paths are utilized in selected areas of the system, while avoiding universal utilization of the wide data paths in the system. According to a third aspect of the invention, one or more stacks are utilized to facilitate packet processing. According to a fourth aspect of the invention, a packet size determiner is allocated to a packet from a pool of packet size determiners, and is returned to the pool upon or after determining the size of the packet. According to a fifth aspect of the invention, a packet is buffered upon or after ingress thereof to the system, and a packet for egress from the system assembled from new or modified packet data and unmodified packet data as retrieved directly from the buffer. According to a sixth aspect of the invention, a system for preventing re-ordering of packets in a packet processing system is provided. A seventh aspect of the invention involves any combination of one or more of the foregoing.

Packet processing system architecture and method

A method and system for an aggregated virtual local area network (VLAN) architecture in which several VLANs in a network share the same default router address and subnet mask, but remain isolated from one another's network traffic. Instead of the traditional method of assigning one subnet to a VLAN, each VLAN is assigned only a portion of a subnet's IP address space, and is further grouped into a super-VLAN uniquely associated with that subnet. Intra-VLAN traffic is forwarded only to host IP addresses assigned to that same VLAN according to a VLAN identifier carried in the data packet. Inter-VLAN traffic is processed by a virtual router interface which routes the data packet by applying the routing configuration for the subnet uniquely associated with the super-VLAN, according to a super-VLAN identifier carried in the data packet.

Method and system for VLAN aggregation

A method is provided to dynamically manage the configuration of a network device. An application supporting a protocol, network interface or other component of the configuration operates in conjunction with a master agent and subagent to send and receive configuration management information. The application further operates in conjunction with a configuration manager interface and configuration manager to access and update the configuration in accordance with a priority of the application, and without taking the network device out of service.

Method and apparatus for dynamic configuration management

A method and apparatus is provided to restore the configuration of a network device. A configuration manager in a network device saves a version of the configuration of the network device by storing the configuration data in an format that conforms to a standard markup language such as the extended markup language (XML). The format includes a sequence of corresponding tags and values that represent the content of the internal data structures in the memory of the router that comprise the saved version of the configuration. At the time of restoration, an parser is used to parse the values from the tags and the configuration manager restores the contents of the internal data structures in the memory of the router to the parsed values in accordance with the corresponding tags.

Method and apparatus for restoring the configuration of a network device

A packet processing system architecture and method are provided. According to a first aspect of the invention, packet parser functions are distributed throughout a packet processing system comprising a packet classification system and a packet modification system. According to a second aspect of the invention, an egress mirroring function is provided to the system. According to a third aspect of the invention, a multi-dimensional quality of service indicator for a packet is provided. According to a fourth aspect of the invention, a cascaded combination of multiple, replicated packet processing systems is used to process a packet. A fifth aspect of the invention involves any combination of one or more of the foregoing.

A method is provided to convert network management protocol request into a markup language representation. In one embodiment, the present invention includes receiving a network management protocol request at a network device, generating a plurality of markup language tags and content embedded in the markup language tags based on the received request, and responding to the request using the plurality of markup language tags and content embedded in the markup language tags using a unified backend interface. In one embodiment, routines used to generate the plurality of markup language tags and content are generated automatically using an instrumentation module.

Method and apparatus for converting network management protocol to markup language

A layer-2 network switch device forwarding database implementation and method to access the forwarding database. A forwarding database (FDB) is implemented as a tree. A separate VLAN database is also structured as a tree. Each node in the tree represents a separate VLAN. For each VLAN, all associated ports are maintained in a data structure organized as a tree. Likewise, all port information is maintained in a tree-based data structure, and for each port, all VLAN information associated with the port is maintained in a tree data structure. Each node in a VLAN's port tree data structure is linked with each corresponding node in the port's VLAN tree data structure. Each pair of nodes maintains a linked list of all FDB entries relating to the node pair. Operations are quickly and efficiently performed on the FDB using the data structure architecture.

Forwarding database in a network switch device

A method and system is provided for increasing participation in a standby router protocol (SRP) without increasing the amount of network traffic due to SRP messaging. One or more domain master VLANs participate in an SRP on behalf of numerous member VLANs belonging to the domain master VLAN's domain. The domain master VLANs are associated with at least one virtual router. Each domain member VLAN follows the current default routing configuration for the domain master VLAN as determined in accordance with the SRP election process defined for that virtual router. An end-host attached to a host-specific port on an SRP router participates in the SRP by using a router bridge connection established between the SRP router and other SRP routers supporting the virtual router. Each end-host on a host-specific port follows the current default routing configuration implemented by the current master SRP router as determined in accordance with the SRP election process defined for that virtual router.

Method and system for increasing participation in a standby router protocol

Methods and systems for associating and translating VLAN tags are disclosed. In one implementation, multiple different member VLAN tags are associated with a translation VLAN tag. When a frame addressed to an unknown MAC address and containing one of the member VLAN tags is received, the frame is flooded to the translation VLAN and to ports associated with the source member VLAN other than the originating port. In the copy sent to the translation VLAN, the VLAN tag is replaced with the tag of the translation VLAN, for tagged ports. For untagged ports, the input VLAN tag may simply be stripped from the frames. When a layer 2 frame addressed to an unknown MAC address and containing the translation VLAN tag is received, the layer 2 frame is flooded to each of the member VLANs and to ports of the translation VLAN other than the originating port. The VLAN tag in the frames forwarded to each of the member VLANs may be replaced with the VLAN tag corresponding to each member VLAN, for tagged ports. For untagged ports, the input VLAN tag may simply be stripped from the frames. MAC address learning for frames received from member VLANs extends to the translation VLAN but not to other member VLANs. MAC address learning for frames from the translation VLAN extends to the member VLANs.

Methods and systems for associating and translating virtual local area network (VLAN) tags

A system for deriving hash values for packets in a packet processing system is described. In this system, hash derivation logic is configured to derive a hash value for the packet responsive to a key that drives processing of the packet. The hash value is useful for supporting additional processing of the packet, such as link aggregation and equal cost multi-path.

System for deriving hash values for packets in a packet processing system

A method and system is provided in which MAN traffic is segregated at a customer and a provider domain level. A switch at the edge of the MAN encapsulates a data packet in a new header, which is used to specify the customer domain tags. The data packet is encapsulated further in another new header, which is used to specify new VMAN tags. The nested encapsulation is repeated as necessary until the data packet is forwarded to a remote switch at the edge of the MAN in accordance with the VMAN configuration or the source and destination address in the original data packet. The remote switch strips the VMAN tags from the data packet, and forwards the stripped data packet to the receiving customer domain as specified in the customer domain tag.

Method and system for VMAN protocol Layer-2 packet nested encapsulation

Growing community of inventors

Sunnyvale, CA, United States of America

Michael Yip