Extreme Networks, Inc.

Ram Krishnan

Prakash Kashyap

David K Parker

Rahul Kasralikar

Piya Chindaphorn

Joydeep Chakravarti

Rahul S Kasralikar

A network switch includes a plurality of isolated ports, each associated with a private domain. The switch also includes a network port associated with the private domain. A memory in the switch maintains a hardware-based forwarding table for the private domain. Processing logic in the network switch prevents forwarding of packets between isolated ports within the private domain based at least in part on a privacy level associated with each entry in the hardware-based forwarding table for the private domain.

Customer isolation using a common forwarding database with hardware learning support

In response to a network topology change, packets are initially flooded on ports of a network device. In addition, a bit array is cleared in response to the topology change. Each bit in the bit array is associated with a particular forwarding entry on the network device. In connection with the clearing of the bit array, the flooding of packets on ports of the network device is made conditional, reducing failover time of the network.

Network convergence in response to a topology change

Forwarding database entries in a memory of a network device are scanned. Each port on the network device maintains a forwarding database in the memory. A filtered list of forwarding database entries is automatically sent to a management module.

Optimal reading of forwarding database from hardware

A method for selectively redirecting a data packet to a port on a switching device which is associated with a corresponding network service. In one embodiment, the data packet is redirected to an intrusion prevention service (IPS) for security analysis of the data packet. In another embodiment, the switching device performs a data link layer redirecting of the data packet based at least in part on whether the data packet is to be flooded from the switching device.

Method and mechanism for port redirects in a network switch

A ring network with an automatic protection switching domain includes a control VLAN and at least one data VLAN. A master node in the ring is connected to at least one transit node. Each node in the ring network is linked to an adjacent node by a primary port or a secondary port. The master node receives notification of a fault via the control VLAN, the fault indicating a failed link between adjacent nodes. In response, the master node unblocks its secondary port to traffic on the data VLAN(s). The forwarding database entries on the master node and on the transit node(s) are flushed. Data traffic is flooded to the ring network until forwarding database entries on the master node and on the transit node(s) have been reestablished.

Reducing traffic loss in an EAPS system

A subset of route entries having the same next hop is identified in a route table. The subset of entries falls within a range of prefixes. Gaps in the subset of route entries that prevent the subset from being contiguous are identified. The gaps in the subset are filled with route entries to make the subset contiguous. All of the route entries in the contiguous subset of route entries have the same next hop, thus the contiguous subset can be aggregated into a single route entry in a forwarding table. For each gap-filling entry added to the route table, an additional route entry having forwarding priority over the gap-filling entry is added to the forwarding table.

Method for optimizing IP route table size through IP route aggregation

A data packet is received at a network switch. The packet has a destination address that is reached via a Link Aggregation group on a virtual local area network (VLAN). A forwarding database lookup is performed to determine a Link Aggregation port reference number for the data packet on the VLAN. A Link Aggregation port table is then searched to determine the primary Link Aggregation port and a backup Link Aggregation port for forwarding the packet. A port array for ports in the Link Aggregation group is searched to determine if the primary Link Aggregation port is valid. If the primary port is valid, then the packet is forwarded on the primary Link Aggregation port. If the primary port is not valid, then the packet is forwarded on the backup Link Aggregation port.

Traffic forwarding in a traffic-engineered link aggregation group

In a packet switching device or system, such as a router, switch, combination router/switch, or component thereof, a method of and system for performing a table lookup operation using a lookup table index that exceeds a CAM key size is provided. Multiple CAM accesses are performed, each using a CAM key derived from a subset of lookup table index, resulting in one or more CAM entries. One or more matching table entries are derived from the one or more CAM entries resulting from the multiple CAM accesses.

Growing community of inventors

Sunnyvale, CA, United States of America

Ram Krishnan