Sophos Limited

Telefonaktiebolaget Lm Ericsson (publ)

Nikhil Bhandari

Andrew James Thomas

Biju Ramachandra Kaimal

Venkata Suresh Reddy Obulareddy

Keshav Gupta

Nitin Katiyar

Thiyagu Rajendran

Amit Katyal

Avni Bhupendrakumar Wala

Mayur Premi

Vamshi Krishna Dommeti

Srisakthi Subramaniam

Madan Mohan Nayak

Matthew Charles Setzer

Praneeth Kumar Reddy Earikireddy

Satya Prakash

Robert W Cook

Ramesh Kamath

Systems and methods for assigning a persistent internet protocol (IP) address to a virtual private network (VPN) client. The method includes receiving, at a first server, a request for access from a first VPN client, the request including access credentials and the first server having a routing table; sending, from the first server, the access credentials to an access server; receiving, from the access server at the first server, a first static IP address to be assigned to the first VPN client, wherein the first static IP address is selected from a plurality of available static IP addresses; assigning the first static IP address to the first VPN client; and adding the first static IP address to a static routing path in the routing table, the static routing path specifying an interface to which traffic associated with the first VPN client is to be routed. The static routing path is configured to be referenced to enable traffic associated with the first VPN client to be directed through the interface.

Persistent IP address allocation for virtual private network (VPN) clients

In a cluster of network devices using a consensus protocol for cluster synchronization, a full software rollback is performed by backing up a cluster state on a primary instance for the cluster, and then restarting all devices at the same time from a prior partition. The primary instance can then start a cluster management service and other devices can join the cluster using the consensus state stored by the primary instance.

Software rollback of cluster of network devices

A policy created through an administrative user interface is converted into an intermediate representation that can be compiled for execution by a gateway or converted into a human-readable form for modifications by the administrator.

Executable policy declarations for network security

An administrator can initiate an automatic software update to a network appliance that is configured as a cluster of nodes. The update is performed sequentially on a node-by-node basis in order to maintain availability and performance of the network appliance during the update.

Updating a cluster of nodes in a network appliance

A method in a first network device of performing a software update of a line card of a second network device without disruption to data traffic. The method includes causing a redundant control plane component of the second network device to be updated according to the software update. The method continues with causing the second network device to instantiate, based on the software update, a line card virtual machine (LC VM) as a redundant data plane component for the line card. The method further includes causing a third network device to forward data traffic to both the line card and the LC VM of the second network device, and causing the second network device to update the line card according to the software update while processing the received data traffic using the LC VM.

Method and apparatus for performing hitless update of line cards of a network device

Growing community of inventors

Bengaluru, India

Nikhil Bhandari