Hewlett Packard Enterprise Development LP

Saumya Dikshit

Vinayak Joshi

Venkatavaradhan Devarajan

Srinath Krishna Rao

Tathagata Nandy

Venkatesh Natarajan

Anil Raj

Ankit Kumar Sinha

Rajeev Jain

Santosh Sudam Easale

Ashwini Dahiya

Thimma Reddy Gadekal

Pradeep Kumar Surendran

Madhavi Murthi

In some examples, a system dynamically assigns, based on one or more factors, tunnels of an underlay and overlay network to a plurality of broadcast groups, where the one or more factors include a factor relating to an operation in the underlay and overlay network, and where the dynamic assignment of the tunnels to the plurality of broadcast groups includes modifying an assignment of a first tunnel from a first broadcast group to a second broadcast group of the plurality of broadcast groups.

Dynamic assignments of tunnels to broadcast groups

Systems and methods provide a new type of time-length-value data stream (TLV) which can be encapsulated in an OAM ping packet. This 'EVI TLV' encapsulating OAM ping packet can be sent to a network device (e.g., a border router) that a liaison VRF is provisioned on. Upon receipt, the encapsulated EVI TLV instructs the network device to determine whether the configuration of the liaison VRF is mapped to an EVI value specified by the EVI TLV. If the configuration of the liaison VRF is mapped to the specified EVI value, the network device returns an echo response indicating that the configuration of the liaison VRF is mapped onto the specified EVI value. Such a response may indicate that the liaison VRF is reachable for the EVPN.

Validating reachability for liaison VRFs using OAM ping packets

In an example, a network switch is to receive a loop detect packet from an access netwssork connected to a Data center network (DCN). The DCN includes a VXLAN overlay and the network switch is configured as a VTEP. The network switch compares the VNI of a source VTEP from which the loop detect packet originates with a locally configured VNI. In response to a match, it is determined that the network switch is configured as a peer VTEP. Import RT in the loop detect packet is compared with an export RT of the peer VTEP and the export RT in the loop detect packet is compared with an import RT of the peer VTEP. Based on the comparison, it is determined whether a VXLAN tunnel is configured between the peer and the source VTEPs. In response to the VXLAN tunnel being configured, the switch may determine that a network loop is present.

Loop detection in virtual extensible local area network overlay

In an example, a failure event is detected in a network, where the failure event is indicative of a network outage in a network device or a peer network device of an MC-LAG. The network device and the peer network device may be configured as a first VTEP in an overlay network. It may be determined that reprovisioning of virtual tunnels in the network device is incomplete. State parameters between the network device and the peer network device is synchronized. The set of virtual tunnels in the network device is provisioned based on the state parameters. After completion of provisioning of the virtual tunnels, an IP address of the first VTEP is published to underlay network devices connecting the first VTEP to a second VTEP over an underlay network. Subsequently, communication links between the MC-LAG and a host device is enabled.

Failure detection and mitigation in an MC-LAG environment

A system for facilitating remote reachability checks for a switch. During operation, the system can receive one or more control messages from a management platform. Here, a respective control message can include one or more type-length-value (TLV) data structures. If the system identifies a first TLV data structure associated with validation in a first control message, the system can determine a validating plane based on a value of the first TLV data structure. The system can then validate the first control message at the validating plane. Upon identifying, in a second control message, a second TLV data structure associated with a plurality of parameters for a request in the second control message, the system can determine a subset of active parameters from the plurality of parameters based on an indicator in the second TLV data structure. The system can then process the request based on the subset of active parameters.

Remote reachability checks in a distributed tunnel fabric

A method and system are provided which facilitate synchronization of client IP binding databases across an extended network by leveraging the BGP control plane. During operation, a switch configures a first synchronization identifier indicating validated Internet Protocol (IP) binding information of an associated client. The switch receives a Border Gateway Protocol (BGP) update message associated with a first client, wherein the BGP update message includes a second synchronization identifier. Responsive to determining that the second synchronization identifier matches the first synchronization identifier, the switch: extracts from the BGP update message reachability information, which includes media access control (MAC) and IP information associated with the first client; validates the MAC and IP information based on security policies; and adds the MAC and IP information to a local IP binding database, thereby allowing synchronization of the validated IP binding information of the first client between the switch and other switches.

Synchronization of client IP binding database across extended networks leveraging BGP control plane

In an example, a wired network device receives a first join message originating from a client device associated with a first wireless access point (WAP) connected to another wired network device in a broadcast domain. An entry corresponding to the client device is created in a remote receiver record of the wired network device. In response to the client device transitioning from the first WAP to a second WAP connected to the wired network device, it is determined that the client device is locally connected to the wired network device. Intention of the client device to receive multicast traffic is identified. A second join message directed to the network address of the multicast group and distributed in the broadcast domain. A traffic flow path for the multicast traffic via the wired network device and the second WAP to the client device is configured.

Seamless mobility for clients receiving multicast traffic

One aspect provides a method and system for managing address resolution requests in a network. During operation, a gateway of the network advertises a route for sending address resolution requests and determines whether a cached entry corresponding to an address resolution request received via the route exists in a neighbor table. In response to determining that the cached entry exists, the gateway responds to the address resolution request based on the cached entry; in response to determining that the cached entry does not exist, the gateway replicates the address resolution request to edge devices in the network, thereby facilitating discovery of a target host corresponding to the address resolution request.

System and method for optimizing ARP broadcast

An example network orchestrator of a SDN is configured to receive, based on a user input, credentials associated with a traffic flow. Based on the credentials, it is determined whether the traffic flow is received at an ingress overlay network node. Route information and encapsulation information of the traffic flow is extracted from the ingress overlay network node. A first set of underlay network nodes each of which is a potential next hop for the traffic flow is identified. It is determined, based on the encapsulation information, whether the traffic flow is received by one of the first set of underlay network nodes. It is determined whether the traffic flow is received at an egress overlay network node from one of the first. A network trace of the traffic flow is determined based on the determinations of whether the traffic flow is received at the ingress overlay network node, one of the first set of underlay network nodes, and the egress overlay network node. Based on the network trace, a fault in a link between network nodes or in the ingress overlay network node or in the egress overlay network node or in one of the first set of underlay network nodes is detected.

Traffic flow trace in a network

Examples disclosed herein relate to a method comprising receiving a data packet originating from a first device and intended for a second device, wherein the first device and the first access device belong to a first branch of a Wide Area Network (WAN) using a MPLS overlay and the second device belongs to a second branch of the WAN. The method includes encapsulating the data packet in VXLAN including a VXLAN label identifying a role type and transmitting the data packet to a first core device. The method includes determining an MPLS label corresponding to the role type and transmitting the data packet over the MPLS overlay to a second core device belonging to the second branch of the WAN. The method includes translating the MPLS label into the VXLAN label and transmitting the data packet including the VXLAN label to a second access device for an enforcement action.

Label based policy enforcement

A system for redirecting traffic is provided. The system can allow a first switch to participate in a virtual switch in conjunction with a second switch of an overlay tunnel fabric. A path between a respective switch pair of an underlying network of the fabric can be determined based on a routing process. The first and second switches may individually participate in the routing process. Hence, the packets to a tunnel to the virtual switch can be distributed among paths to the first and second switches. The system can determine a trigger condition indicating that packets subsequently received via the tunnel is to be directed to a path to the second switch. The first and second switches can remain in an operational state. The system can then advertise a high cost for a link to the first switch for the routing process in the underlying network.

Dynamic traffic redirection for a virtual gateway of a distributed tunnel fabric

One embodiment can provide a method and system for synchronizing MTU in a WAN edge with router redundancy. During operation, the system may determine a set of interfaces associated with a network device among a plurality of network devices coupled via inter-switch links. The system can determine a set of layer-3 MTU values corresponding to the set of network interfaces and can determine a highest layer-3 MTU value based on the set of determined layer-3 MTU values. The system can synchronize, via the inter-switch links, the highest layer-3 MTU value, resulting in a set of highest layer-3 MTU values at the network device. The system can determine, based on the set of highest layer-3 MTU values, a global highest layer-3 MTU value. The system can derive a layer-2 MTU value based on the global highest layer-3 MTU value and can configure a respective inter-switch link with the layer-2 MTU value.

Growing community of inventors

Bengaluru, India

Saumya Dikshit