Cisco Technology, Inc.

Adtran Gmbh

Luminous Networks, Inc.

Peter Geoffrey Jones

Riaz Khan

Norman William Finn

David John Zacks

Linda Tin-Wen Cheng

Thomas Szigeti

Rong Pan

Hiroshi Suzuki

Rudolph Benedict Klecka

Hariprasada Rao Ginjpalli

Brian Eliot Weis

Rajagopalan Janakiraman

Sridhar Subramanian

Vinay K Bannai

Jason C Fan

Jacqueline M Zoucha

Paddy Vishnubhatt

Arun Sastry

Hasnain Rashid

Phyllis Yip

Theodora Karali

Navindra Yadav

Sanjay Kumar Hooda

Shree N Murthy

Daniel Christian Biederman

Atri Indiresan

Nalinaksh Pai

Krishna Kumar Vavilala

Pagalavan Krishnamoorthy

Amrik Singh Bains

Vijayaraghavan Doraiswami

Kabiraj Sethi

Vikram Vikas Pendharkar

Shivangi Sharma

Leonid Shvarzberg

Chris Desiniotis

Saravanan Coimbatore

Krishna Kondaka

Darrell Rice Heflin

Da-Yuan Tung

Shawn Michael Wargo

Jimit Maheta

Pooja Vishvanath Indi

Praveen T Chandra

Masood Ahmad

Melvin Tsai

Trupthi Bharatraj Chougule

Sasikumar Sadayan

Deepika Mulani

Aaditi Ganesh Pai

Nalinaksh M Pai

Energy savings through adjustment of link speed may be provided. A utilization of a port may be monitored. The port may be configured to run at a plurality of speeds. Based on monitoring the utilization of the port, it may be determined that the utilization of the port has dropped, for a first predetermined time period, below a supported speed lower than a current port speed. Energy consumed by the port may be lowered, in response to determining that the utilization of the port has dropped, for the first predetermined time period, below a supported speed lower than the current port speed. Lowering the energy consumed by the port may comprise re-configuring the port to run at a second speed comprising a supported speed below the current speed. When the utilization of the port exceeds a predefined threshold over a second predetermined time period, the port speed may be increased.

Energy savings through automatic adjustment of link speed

Embodiments of the present disclosure are directed to dynamic shadow operations configured to dynamically shadow data-plane resources in a network device. In some embodiments, the dynamic resource shadow operations are used to locally maintain a shadow copy of data plane resources to avoid having to read them through a bus interconnect. In other embodiments, the dynamic shadow framework is used to provide memory protection for hardware resources against SEU failures. The dynamic shadow framework may operate in conjunction with adaptive memory scrubbing operations. In other embodiments, the dynamic shadow infrastructure is used to facilitate fast boot-up and fast upgrade operations.

Dynamic hardware resource shadowing and memory error protection

Hybrid mode multicast routing may be provided. A switching device may receive a first join. Next, in response to receiving the first join, states for a first protocol mode (e.g., (S, G)) that is source aware and state for a second protocol mode (e.g., (*, G)) that is not source aware may be programed. Then a second join may be sent based on the states associated with the second protocol mode (e.g., (*, G)).

Hybrid mode multicast routing

Embodiments of the present disclosure are directed to protocol state transition and/or resource state transition tracker configured to monitor, e.g., via filters, for certain protocol state transitions/changes or host hardware resource transitions/changes when a host processor in the control plane that performs such monitoring functions is unavailable or overloaded. The filters, in some embodiments, are pre-computed/computed by the host processor and transmitted to the protocol state transition and/or resource state transition tracker. The protocol state transition and/or resource state transition tracker may be used to implement a fast upgrade operation as well as load sharing and or load balancing operation with control plane associated components.

Methods and systems to track protocol and hardware resource state transitions

Methods and systems for fast upgrade or reboot for network device

Dynamic data-plane resource shadowing

Systems and methods provide for performing performance analytics processing of network traffic by copying packets of network traffic to a switch CPU based on a flag. The systems and methods disclosing receiving network traffic comprising one or more packet, generating a network traffic flow record associated with the received network traffic, the network traffic flow record including a copy-to-CPU bit and one or more function flag bits, setting the copy-to-CPU bit to an on configuration, processing the one or more packets by one or more functions to generate network flow analytics, wherein the one or more function flag bits are set in response to the one or more functions generating network flow analytics, and setting the copy-to-CPU bit to an off configuration.

Switch triggered traffic tracking

Systems, methods, and computer-readable media for monitoring traffic in a network include receiving, at an analytics platform connected to the network, one or more encapsulated packet headers from one or more network nodes of the network. From the one or more encapsulated packet headers, at least one or more source addresses of the one or more network nodes which transmitted the encapsulated packet headers, and one or more timestamps at which the one or more encapsulated packet headers were transmitted from the one or more network nodes may be determined. From at least the one or more source addresses and timestamps, network traffic information such as one or more of latency or jitter of data packets transiting through the one or more network nodes may be determined, wherein the one or more encapsulated packet headers may correspond to the data packets transiting through the one or more network nodes.

Active targeted data plane traffic monitoring for wired networks

At a network device configured to control access to a network, a client device authentication request is received from a client device. The request includes identity credentials and a temporary media access control (MAC) address of the client device. The client device is successfully authenticated based on the identity credentials. After authentication, a new MAC address is established in the client device. A data frame is received from at the network device. It is determined whether the client device is using the new MAC address based on the received data frame. If it is determined that the client device is using the new MAC address, the client device is permitted access the network.

Allocation of local MAC addresses to client devices

Presented herein is an exemplified system and method that provides visibility, for traffic analytics, into secured encapsulated packet (e.g., secure VXLAN-GPE packet, a secure metadata-GPE packet or other GPE standards). The exemplified system and method facilitate encryption of traffic in a granular manner that also facilitate the monitoring of said secure traffic in a fabric network in an end-to-end manner throughout the network. Such monitoring can be beneficially used for analytics, performance analysis, and network debugging/troubleshooting.

Secure traffic visibility and analytics for encrypted traffic

In one embodiment, a system, apparatus, and method are described for providing limited data connectivity for devices connected to a switch when the switch enters bootloader mode. The switch has a central processing unit (CPU), the CPU comprising a reload handler and an application-specific integrated circuit (ASIC), the ASIC comprising ASIC forwarding logic. The ASIC is instructed, by the reload handler, to store an ASIC database, the ASIC database for storing the ASIC forwarding logic. The reload handler maintains a physical layer (PHY) state of the switch. Use of spanning tree protocol (STP) and Transmission Control Protocol (TCP) keepalive is disabled in the switch. A state of stack hardware is retained in switch memory. New ports of the switch are prevented from becoming active, and the ASIC forwarding logic is, in response to receiving the instruction, stored in the ASIC database. Related systems, apparatuses, and methods are also described.

Methods and systems for providing limited data connectivity

Growing community of inventors

Campbell, CA, United States of America

Peter Geoffrey Jones