Juniper Networks, Inc.

Ravi Shekhar

Quaizar Vohra

Joseph LaSalle White

SelvaKumar Sivaraj

Wen Lin

Jaihari V Loganathan

Jeelani Syed

Amit Shukla

Jeevan Madhu Kamisetty

Suresh Boddapati

Jean-Marc Frailong

John E Drake

Aleksandar Luka Ratkovic

Sreekanth Reddy

Michael Francis O'Gorman

Shesha Bhushan Sreenivasamurthy

Aldrin Isaac

Vamshi Krishna Voruganti

Vijayabhaskar Annamalai Kalusivalingam

Sean A Mentzer

Gunes Aybay

Rahul Aggarwal

Jainendra Kumar

Umesh Kondur

Vasudevan Venkatraman

Arijit Sarcar

Vijayananda Jayaraman

Murali Vemula

Shashvat A Thakor

Sri Ram N Bathina

Abhay Kumar

Pavan Kumar Tappal Ramakrishnaiah

Easwar Swaminathan

Predrag Spasic

Sankar Ramamoorthi

Rajeev Gupta

Ronak Shah

Amit Kumar Saha

Manoj Tiwari

Prasennaram Dhanushkodi

Anil Lohiya

Kaushik Dutta Majumdar

Venkata Rajasekharu Athreyapurapu

Prabakaran Thirumali Sampath

Mohan Kumar A P

Pranav Koushik

A first provider edge device may receive device information from a second provider edge device included in an Ethernet virtual private network (EVPN). The device information may identify a media access control (MAC) address and may indicate that the device is connected to the second provider edge device. The first provider edge device may receive data transmitted by the device and may determine, based on information included in the data, that the device has moved from the second provider edge device to the first provider edge device. The first provider edge device may generate a data packet including mobility information indicating that the device has moved to the first provider edge device. The first provider edge device may transmit, via a data plane of the EVPN, the data packet to the second provider edge device to permit the second provider edge device to update routing information for the device.

Fast convergence for MAC mobility

Techniques are described for policy driven on-demand tunnel creation and deletion between end points in a software-defined wide area network (SD-WAN) having a hub-and-spoke topology. A software-defined networking (SDN) controller that facilitates cloud-based services of a service provider network that sets up the SD-WAN is configured to determine whether a tunnel between end-points is to be created or deleted based on information indicative of the traffic, such as amount, time, application generating the traffic, and the like, between end-points.

Policy-driven on-demand tunnel creation/deletion based on traffic information in a wide area network (WAN)

A first device may receive information that identifies a second device. The second device may be connected to the first device or a third device. The second device may be a source of traffic to be received by the first device. The first device may determine whether the second device is local or remote to the first device based on receiving the information. The first device may store first information or second information based on determining whether the second device is local or remote. The first information may identify a route associated with the second device. The second information may identify a single route associated with multiple second devices. The first device may provide the traffic using the first information or the second information after storing the first information or the second information.

Optimizing information related to a route and/or a next hop for multicast traffic

In some embodiments, a non-transitory processor-readable medium stores code representing instructions configured to cause a processor to receive, from an access switch, a first signal including forwarding state information associated with a first peripheral processing device from a set of peripheral processing devices. The code can further represent instructions configured to cause the processor to receive, from the first peripheral processing device, a second signal including a data packet. The code can further represent instructions configured to cause the processor to send, to a replication engine associated with the set of peripheral processing devices, a third signal such that the replication engine (1) defines a copy of the data packet, which is included within the third signal, and (2) sends, to a second peripheral processing device from the set of peripheral processing devices, a fourth signal including the copy of the data packet.

Multicasting within distributed control plane of a switch

In some embodiments, a network management module is operatively coupled to a set of edge devices that are coupled to a set of peripheral processing devices. The network management module can receive a signal associated with a broadcast protocol from an edge device from the set of edge devices in response to that edge device being operatively coupled to a switch fabric. The network management module can provision that edge device in response to receiving the signal. The network management module can define multiple network control entities at the set of edge devices such that each network control entity from the multiple network control entities can provide forwarding-state information associated with at least one peripheral processing device from the set of peripheral processing devices to at least one remaining network control entity from the multiple network control entities using a selective protocol.

Methods and apparatus for automatically provisioning resources within a distributed control plane of a switch

A device may receive, via a first message, first route information for directing network traffic for a network. The first route information may identify a media access control (MAC) route corresponding to a MAC address associated with a host device connecting to a subnet of the network. The first route information may fail to include Internet protocol (IP)/MAC binding information associated with the host device. The device may transmit a request for IP/MAC binding information associated with the host device. The device may receive a response, to the request for IP/MAC binding information, identifying the IP/MAC binding information. The device may advertise, via a second message, second route information for directing network traffic for the network based on receiving the response identifying the IP/MAC binding information. The second route information may identify the IP/MAC binding information associated with the host device.

Media access control address and internet protocol address binding proxy advertisement for network devices of a network

In one embodiment, an apparatus includes a memory, a communications interface and a processor. The processor is operatively coupled to the memory and the communications interface. The processor is configured to receive, at a first time, a label identifier associated with an aggregated link within the communications network via the communications interface. The aggregated link including a plurality of redundant links. The processor is configured to receive, at a second time after the first time, a data packet including the label identifier via the communications interface. The processor is configured to send at least a portion of the data packet via a first link separate from the aggregated link based on the label identifier. The processor is configured to not send the data packet via a link from the plurality of redundant links of the aggregated link based on the label identifier.

Data packet switching within a communications network including aggregated links

A network device receives, from another network device associated with a first data center, a route update that includes a common virtual network identifier or a first virtual network identifier associated with the first data center. The network device translates the common virtual network identifier or the first virtual network identifier to a second virtual network identifier associated with a second data center, where the second data center is different than the first data center. The network device provides the route update, with the second virtual network identifier, to the second data center.

Interconnecting virtual networks using an ethernet virtual private network (EVPN) and virtual extensible local area network (VXLAN) based overlay network

This disclosure describes techniques for utilizing VXLANs within a network, such as a data center, for transporting L2 customer communications. Moreover, the disclosure describes techniques for auto-discovering, for each VXLAN, a corresponding replication node for replicating and distributing unknown destination, broadcast, and multicast frames to VXLAN Tunnel Endpoints ('VTEPs') within the data center. Further, the techniques facilitate, by the replication node, discovery and auto-registration of the VTEPs for the respective customer network. As such, the techniques may facilitate configuration of VXLANs without necessarily relying on multicast protocols to provide such functionality. In this way, the techniques described herein may be used to supplement or even replace reliance on multicast protocols, such as the Protocol Independent Multicast (PIM) protocol, when configuring VXLANs within a network.

Auto-discovery of replication node and remote VTEPs in VXLANs

In some embodiments, an apparatus includes a management module configured to assign a unique set of identifiers to each network control entity from a set of network control entities. As a result, a network control entity from the set of network control entities can assign an identifier from its unique set of identifiers to a port in response to that network control entity receiving a login request from the port. The set of network control entities is associated with a distributed multi-stage switch. The management module is also configured to store a zone set database associated with the distributed multi-stage switch. The management module is configured to send an instance of an active zone set stored within the zone set database to each network control entity from the set of network control entities such that each network control entity can enforce the active zone set.

Methods and apparatus for a distributed Fibre Channel control plane

In some embodiments, a switch module is configured to receive from a first edge device a multicast data unit having a VLAN identifier. The switch module is configured to select a set of port modules based on the VLAN identifier. The switch module is configured to define an unmodified instance of the multicast data unit for each port module from the set of port modules. The switch module is configured to send the unmodified instance of the multicast data unit to each port module from the set of port modules, such that each port module applies a filter to the received instance of the multicast data unit to restrict that received instance of the multicast data unit from being sent to a second edge device via that port module if the second edge device is associated with a VLAN domain different than a VLAN domain of the first edge device.

Methods and apparatus for using virtual local area networks in a switch fabric

Growing community of inventors

Sunnyvale, CA, United States of America

Ravi Shekhar