Cisco Technology, Inc.

Rajagopal Venkatraman

Rajeev Kumar

Roberto Mitsuo Kobo

Sanjay Kumar Hooda

Prakash C Jain

Vikash Agarwal

Shree N Murthy

Rahul Kachalia

Balaji Pitta Venkatachalapathy

Ajinkya Abhay Chouthai

Ramchander Rao Nadipally

Xiangqun Li

In one embodiment, network node-to-node connectivity verification is performed in a network including data path processing of packets within a packet switching device. In one embodiment, an echo request connectivity test packet, emulating an echo request connectivity test packet received from a first connected network node, is inserted by the packet switching device prior in its data processing path prior to ingress processing performed for packets received from the first connected network node. A correspondingly received echo reply connectivity test packet is intercepted by the packet switching device during data path egress processing performed for packets to be forwarded to the first connected network node.

Network node-to-node connectivity verification including data path processing of packets within a packet switching device

A method may include bridging in, via a fabric, a multicast data packet from a source device to a first edge device of a plurality of edge devices and flooding the multicast data packet to the plurality of edge devices within a mutual subnetwork of the fabric. The method further includes bridging out the multicast data packet from a second edge device of the plurality of edge devices to a receiving device. The source device and the receiving device are located within the mutual subnetwork.

Multicasting within a mutual subnetwork

Techniques and apparatus for allowing a network fabric to accept network devices associated with other fabric networks are described. An example technique involves establishing a communication session between a first network node and a first control plane of the network fabric, wherein the first network node supports a second control plane different from the first control plane; First routing information from the first network node is imported into a first routing table of the first control plane. Second routing information from a second network node is imported into a second routing table of the first network node.

Techniques for allowing software defined (SD) network fabrics to accept network devices from other fabric technologies

Techniques for analyzing traffic originating from a host device in a wireless network to identify one or more virtual machines (VMs) running on the host device and connected to the network via the host device in bridge mode. When a VM is created in bridge mode behind a host device, the traffic originated by the VM will have the source Media Access Layer (MAC) address of the host device. According to techniques described herein, devices and/or components associated with the network may profile the traffic to identify an address of the VM, such as by analyzing dynamic host configuration protocol (DHCP) packets to determine the Internet Protocol (IP) address of the VM. Once the IP address and the MAC address of the VM is known, the components and/or devices may apply security policies to the VM that may be different than security policies applied to the host device.

Security policy enforcement for resources in bridge mode

This technology enables a dynamic host configuration protocol ('DHCP') Layer 2 relay in a Virtual Extensible Local Area Network ('VXLAN') overlay fabric. A host device broadcasts a configuration request, such as a DHCP discover, across an Ethernet virtual private network (&#x201c;EVPN&#x201d;) overlay fabric. The DHCP discover is intercepted by a VXLAN Tunnel End Point (&#x201c;VTEP&#x201d;) device with Layer 2 bridging functionality. The VTEP device selects a centralized gateway (&#x201c;CGW&#x201d;) device with Layer 3 relay functionality as a destination for the DHCP discover. The VTEP device encapsulates the DHCP discover with a unicast VXLAN header comprising the media access control (&#x201c;MAC&#x201d;) address of the CGW device and transmits the encapsulated DHCP discover to the CGW device, resolving the destination address associated with the broadcast. The CGW device transmits the DHCP discover to an Internet Protocol (&#x201c;IP&#x201d;) address associated with a DHCP server that is external to the EVPN overlay fabric.

Growing community of inventors

San Jose, CA, United States of America

Rajagopal Venkatraman