Cisco Technology, Inc.

Patrick Douglas Verkaik

Robert Tristan Shanks

Justin Joel Delegard

Jignesh Devji Patel

Dylan Jason Koenig

Selahattin Daghan Altas

Joseph Morgan Aronow

Clifford Arthur Frey

Dan Aguayo

John Charles Bicket

James Michael Roewe

Timothy John Passaro

Nebojsa Milosavljevic

Asa Daniel Zernik

Adam Weis

Joel Feinstein

Jacob Corr Valentic

Arthur Po-Hsiang Huang

Various implementations disclosed herein include systems, methods and apparatuses of a first device, that obtain contact point information of a second device associated with the first device, as a peer device in a private network, where the contact point information of the second device includes one or more peer uplink identifiers and each respective peer uplink identifier corresponds to a respective peer device uplink of the second device. The systems, methods and apparatuses establish a first private network data tunnel from a first uplink of the first device to the second device, using the contact point information of the second device, and a first uplink identifier associated with the first uplink, and establish a second private network data tunnel from a second uplink of the first device to the second device, using the contact point information of the second device, and a second uplink identifier associated with the second uplink.

Establishing a private network using multi-uplink capable network devices

Systems, methods, and computer-readable storage media for wireless roaming are disclosed. An access point receives a communication request from a wireless device and determines a home broadcast domain associated with the wireless device. The access point determines that the home broadcast domain is different than the broadcast domain associated with the access point and proceeds to identify a second access point that is associated with the home broadcast domain of the wireless device. The access point establishes a tunnel between the access point and the second access point for routing traffic associated with the wireless device.

Wireless roaming using a distributed store

A source node can append a unique identifier to an outbound client packet, transmit the outbound client packet to a recipient node via a port, and create a transmission record including: the unique identifier, a time stamp of the outbound client packet, and an identifier for the port. The source node can receive an inbound client packet that is appended with the unique identifier and a delta time indicating an amount of elapsed time between the recipient node receiving the outbound client packet and the recipient node transmitting the inbound client packet. The source node can determine a performance level of a VPN tunnel provided by the port based on the time stamp value of the outbound client packet, the delta time, and a time stamp value of the inbound client packet indicating a time at which the inbound client packet was received by the source node.

Reducing data transmissions in a virtual private network

A management server includes a configuration and management module processing server configuration information, including a VPN peer list and VLAN/subnet settings. The management server automatically calculates the VPN configuration information, including the VPN peer subnet route information identifying which of the subnets participating in the VPN are behind which of the routers and keys to establish VPN tunnels between those routers participating in the VPN. Each of the routers participating in the VPN includes a VPN tunnel with the other routers participating in the VPN, a set of data structures storing data identifying contact information for each of the subnets participating in the VPN, a combination of an IP address and port to reach one of routers that that subnet is behind, and a forwarding module to forward traffic between the subnets.

System and method for managing site-to-site VPNs of a cloud managed network

Various implementations disclosed herein provide private network driven hosted network device management that enables more robust management of private networks that include such equipment. For example, in some implementations, a method of private network driven hosted network device management includes receiving a fetch request from a compliant device, wherein the fetch request indicates demand for at least one of new and updated configuration data and instructions. In turn, the method further includes assessing whether or not the new and updated configuration data and instructions, for the requesting compliant device, will conflict with local customizations and indicate potential disruption to connectivity and services in an associated private network, in order to produce an assessment result. The method also includes selectively generating a new configuration file including a suitable set of new and updated configuration data and instructions based on the assessment result.

Private network driven hosted network device management

Various implementations disclosed herein include systems, methods and apparatuses that involve a first device selecting a data tunnel for sending packets of a determined network traffic type to another device. For example, in some implementations, a method includes a first device receiving a first group of packets for forwarding to a second device. The method includes the first device retrieving packet-forwarding rules for forwarding the first group of packets, and selecting a first private network data tunnel from a plurality of private network data tunnels between the first device and the second device, for forwarding a first packet of the first group of packets, based on satisfaction of the retrieved packet-forwarding rules. A respective private network data tunnel is associated with a respective uplink of a plurality of uplinks of the first network device. The first private network data tunnel is associated with a first uplink of the first device.

Service-specific, performance-based routing

Previous solutions to the problem of maintaining up-to-date network device addressing, fail to provide systems or processes that efficiently share and obtain addressing information of networking devices in a given network. By contrast, and to that end, various implementations disclosed herein include systems, methods and apparatuses that generate a registry request message, where the registry request message includes a first portion characterized by a first write privilege and a second portion characterized by a second write privilege different from the first write privilege. The systems, methods and apparatuses convey the registry request message to a shared contact point network entity, and obtain a response message addressed from the shared contact point network entity, where the response message includes peer addressing information corresponding to one or more peer network devices associated with the aforementioned systems, methods and apparatuses.

Global contact-point registry for peer network devices

Systems, methods, and computer-readable storage media for high availability and failover. A device obtains an external identity designated for a set of devices on a network, the set of devices comprising the device and a second device, and the external identity comprising public address settings which the set of devices can use when in live mode to communicate with devices outside of the network. While the device is in failover mode and the second device is in live mode, the device listens for heartbeat messages transmitted from the second device. Next, the device detects a failover event when a predetermined number of heartbeat messages have not been received by the device. In response to the failover event, the device then changes from failover mode to live mode and assumes the external identity.

Growing community of inventors

San Francisco, CA, United States of America

Patrick Douglas Verkaik