Cisco Technology, Inc.

Sachin Gupta

Rajagopalan Janakiraman

Prashant Gandhi

Javed Asghar

Douglas Alan Gourlay

Azeem Suleman

Sivakumar Ganapathy

Omar G Abuabara

Suresh Pasupula

Prashanth Matety

Sree Balaji Varadharajan

Shashank Chaturvedi

Pramila Deshraj Singh

Azeem M Suleman

The present disclosure provides for system resource management in self-healing networks by grouping End Point Groups (EPGs) into a plurality of policy groups based on shared security policies; identifying a first policy group with a highest resource demand; assigning a first security policy corresponding to the first policy group to a first switch of a plurality of switches; identifying a second plurality of EPGs from the remaining EPGs that were not included in the first policy group; grouping the second plurality of EPGs into a second plurality of policy groups based on shared security policies; identifying a second policy group with a highest resource demand of the second plurality of policy groups; and assigning a second security policy corresponding to the second policy group to a second switch of the plurality of switches.

System resource management in self-healing networks

Techniques for maintaining isolation and segregation for network paths through multi-cloud fabrics using VRF technologies. The techniques include running virtual routers in a cloud network that connect the cloud network to an on-premises network using a network overlay that preserves VRF information in data packets. Further, the virtual routers connect to individual gateways in the cloud network using tunnels, and each individual gateway is connected to multiple VPCs without overlapping subnets. The virtual routers may assign a sink VRF to each gateway connection that can be used to perform source-IP based VRF selection by mapping source IP addresses in each tunnel connection to appropriate VRFs for the source IP addresses. In this way, virtual routers may use sink VRFs to translate into the VRF information for data packets from the VPCs via source-IP based lookup, and use the corresponding VRF route table to determine next hops for data packets.

Isolation and segmentation in multi-cloud interconnects

A data communication device automatically configures its own communication ports based on attributes of a remote device with which it communicates. The process of configuring the communication ports includes monitoring a communications protocol associated with a remote device on a given communication port of the data communication device without participating in the communications protocol. The data communication device detects an attribute such as a network address associated with the remote device based on the monitored communications. In response to detecting the attribute of the remote device, the data communication device selects one of multiple configuration profiles depending on the detected attribute of the remote device to configure the given communication port.

Methods and apparatus to configure a communication port

Growing community of inventors

Santa Clara, CA, United States of America

Sachin Gupta