Cisco Technology, Inc.

Saravanakumar Rajendran

Jonathan Davar

Michael R Smith

Bhushan Mangesh Kanekar

Dileep Kumar Devireddy

Mark Alan Bakke

Jeffrey Ym Wang

David P Thompson

Thomas James Edsall

Pradeep Kumar Kathail

Sandeep Kumar

Prashant Gandhi

Chandrashekhar Appanna

Timothy J Kuik

Ajit Sanzgiri

Ricky Keangpo Ho

Tefcros Anthias

Herman Levenson

Tuan Thanh Nguyen

Claudette Lucille Surma

Rong-Lung Lue

Kenneth Durazzo

Paul M Quinn

Andrew George Harvey

Robert E Gleichauf

Richard Mandfred Pruss

Munish Mehta

Frederick Juergens Baker

Satish K Gannu

Paul Harry Gleichauf

Dean Cheng

Paul Fazzone

Shriram Velaga

Barry Raveendran Greene

Chingwei Chang

Paul Anthony Fazzone

Michael Smith

Prashant P Gandhi

In one embodiment, a list of source identifiers is maintained at a virtual switch. These source identifiers are allowed to send packets through the virtual switch to ports in a private virtual local area network (PVLAN). When a packet is received at the virtual switch from a particular source destined for a particular port in the PVLAN, the virtual switch determines whether a particular identifier associated with the particular source matches one of the source identifiers in the list. If that particular source identifier is not on the list, the packet is prevented from being forwarded to the particular port in the PVLAN.

Implementing PVLANs in a large-scale distributed virtual switch

Methods and apparatus for providing a device for forwarding packets in a network are disclosed. A first router and a second router having a shared set of interfaces are provided, enabling the first router and the second router to share forwarding data for forwarding packets on the shared set of interfaces.

Load sharing and redundancy scheme

In one embodiment, an apparatus can include a service broker configured to: (i) register a service classifier, and to provide context information to the service classifier; and (ii) register a plurality of service nodes. The service broker can also receive capability and service requests from the service classifier. Further, the context information can include a service header, a reachability indication, and an encapsulation, where the service header and the encapsulation may be attached or related to a packet in the service classifier. In addition, the service classifier can use this information to redirect the packet to a first service node.

Service insertion architecture

In one embodiment, an apparatus includes a port profile manager for receiving a port configuration policy and creating a port profile for the port configuration policy. The apparatus further includes a management interface for transmitting the port profile to a management station operable to receive input mapping the port profile to one or more interfaces associated with virtual machines. The port profile manager receives and stores the mapping input at the management station, for use in configuring the interfaces according to the port configuration policy. A method for policy based configuration of interfaces in a virtual machine environment is also disclosed.

Policy based configuration of interfaces in a virtual machine environment

A blade router for increased interface scalability is provided. The blade router may address interface scalability by having each of the linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade router may appear as a single router from the customer perspective during configuration. For some embodiments, two virtual interfaces may be used, one for regular interface traffic and another for Network Address Translation (NAT)-enabled interface traffic.

Blade router with NAT support

A blade switch for increased interface scalability is provided. The blade switch may address interface scalability by having each of the switch linecards manage its interfaces locally and may use the concept of virtual and local interfaces for intelligent forwarding. The blade switch may appear as a single network switch having a single bridge ID from the network perspective during operation and from the customer perspective during configuration.

Blade switch with scalable interfaces

A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element intercepts data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element. The network element determines whether information contained in layer 2-4 headers of the data packet satisfies specified criteria. If the information satisfies the specified criteria, the network element directs the data packets to a blade of the network element that performs processing based on an application layer message at least partially contained in the data packets. If the information does not satisfy the specified criteria, the network element forwards the data packets towards the destination without sending them to the blade.

Performing message payload processing functions in a network element on behalf of an application

In a virtual infrastructure, a single appliance is provided that hosts a centralized virtual machine monitor (VMM) control plane to effectively establish a single virtual switch across all virtual machines within one or more clusters of servers, thereby reducing the number of management points for the network administrator and facilitating easier VM migration.

Centralized control plane appliance for virtual infrastructure

A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element receives user-specified input that indicates a particular message classification. The network element also receives one or more data packets. Based on the data packets, the network element determines that an application layer message, which is collectively contained in payload portions of the data packets, matches the particular message classification. The network element processes at least a portion of the message by performing, on behalf of the application to which the message is directed, and relative to at least the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification.

Method and system for providing access layer satellite architecture in a data network including receiving a data packet from an access layer network device, the data packet including a Virtual Local Area Network (VLAN) identifier associated with a port on the access layer network device, performing a route lookup procedure based on the received data packet to determine a destination of the data packet, updating an ARP table with a Media Access Control (MAC) address associated with the VLAN identifier and the port of the received data packet, and transmitting the data packet to a destination network device, is disclosed.

Data forwarding in a layer three satellite network

A technique enables learning and switching of frames between line cards that are interconnected by a switch fabric of a distributed network switch. The network switch comprises a router and a plurality of forwarding engines, each having an associated forwarding table. The distributed learning and switching technique configures (i) the router to issue an extra copy of a routed frame to an ingress card having a port attached to the source of the frame; (ii) the router to ensure that the contents of a source index field of the routed frame header indicate that the frame originated from the ingress card; (iii) the router to assert a shortcut bit in the header of the routed frame; (iv) a forwarding engine on an egress card having a port attached to the destination of the frame to generate and issue a media access control notification frame to the ingress card and (v) a forwarding engine on the ingress card to mark an established entry in a layer 2 (L2) portion of its forwarding table as ineligible for normal L2 aging policies.

Method and apparatus for learning and switching frames in a distributed network switch

Growing community of inventors

San Jose, CA, United States of America

Saravanakumar Rajendran