Cisco Technology, Inc.

Northrop Grumman Systems Corporation

Rick G Chang

Yibin Yang

Shyam N Kapadia

Rajesh Babu Nataraja

Chiajen Tsai

Patnala Debashis Rao

Manish Chandra Agrawal

A method and system for encrypting and decrypting data messages which are communicated between two devices. The method for encrypting/decrypting data messages uses hybrid symmetric/asymmetric encryption, where symmetric encryption is used for data records and asymmetric encryption is used to encode new symmetric keys. All data records and symmetric key data are sent in a single data stream. The method allows the data producer to create a new symmetric key at any desired time, and also allows the data consumer to recover symmetric keys needed for decryption, on the fly by using the cipher text data stream itself, as the data messages are consumed. Data consumption can be at a later time and independent of production, and symmetric keys need not be shared between producer and consumer in advance.

Data assisted key switching in hybrid cryptography

In accordance with one example embodiment, there is provided a system configured for virtual local area network (VLAN) blocking on a virtual port channel (vPC) member link to handle discrepant virtual network instance (VNI) to VLAN mappings. In other embodiments, the system can be configured for providing Virtual Switch Interface Discovery Protocol (VDP) and virtual switch enhancements to accommodate discrepant VNI to VLAN mappings. In another example embodiment, an apparatus is provided that includes a processor, and a memory coupled to the processor, where the apparatus is configured such that if a server is connected through a virtual port channel, a VDP is used to notify the server of different VNI to VLAN mappings. In another embodiment, the apparatus can extend a VDP Filter Info Field to carry a set of VLANs mapped to a VNI, keyed by leaf MAC addresses that serve as bridge identifiers.

Automatic resolution of virtual network instance to VLAN mapping conflicts in dual-homed deployments in a dynamic fabric automation network architecture

An example method for facilitating multiple mobility domains with VLAN translation in a multi-tenant network environment is provided and includes detecting attachment of a first virtual machine on a first port and a second virtual machine on a second port of a network element, the first port and the second port being configured with a first mobility domain and a second mobility domain, respectively, and the first and second virtual machines being configured on a same original VLAN, determining whether the original VLAN falls within a pre-configured VLAN range, translating the original VLAN to a first VLAN on the first port corresponding to the first mobility domain and to a second VLAN on the second port corresponding to the second mobility domain, and segregating traffic on the original VLAN into the first VLAN and the second VLAN according to the respective mobility domains for per-port VLAN significance.

Multiple mobility domains with VLAN translation in a multi-tenant network environment

Growing community of inventors

Santee, CA, United States of America

Rick G Chang