Cisco Technology, Inc.

Pensando Systems Inc.

Sukhesh Halemane

Vipin Jain

Mahidas Prabhanjan

Dhananjaya Rao

Hrishikesh Narasimhan

Enrico Schiattarella

Methods and network interface devices for establishing a secure and authenticated network connection are provided. The method comprises: receiving, from a requesting entity, a destination IP address and a first certificate that is used to establish a secure network connection, wherein the first certificate comprises a first security attribute that is associated with a source destination IP address; identifying, with aid of one or more processors, a stored second security attribute associated with the destination IP address; and determining, with aid of the one or more processors, a policy action based at least in part on the first security attribute and the second security attribute.

Methods and systems for cryptographic identity based network microsegmentation

A first addressing message is received at a first switch in a network fabric indicating that a first virtual machine has undergone migration from connection to a first virtual switch at a first server to connection to a second virtual switch at a second server. A route advertisement message is then transmitted from the first switch to at least a second switch in the network fabric. This route advertisement is configured to cause the second switch to transmit a second addressing message to a second virtual machine connected to the first virtual switch. The second addressing message provides the second virtual machine with updated addressing information for the first virtual machine. A third addressing message is also transmitted from the first switch to the first virtual machine to provide the first virtual machine with updated addressing information for the second virtual machine.

Network assisted virtual machine mobility

An addressing redirection mechanism is initiated at a first networking device in a computing network in order to enable the first networking device to perform one or more distributed proxy addressing operations on behalf of a connected second networking device. An address request transmitted from a first host device to a second host device to obtain addressing information of the second host device is received at the first networking device, and the first networking device inspects the address request to identify addressing information for the first host device. The first networking device is configured to forward the addressing information for the first host device to the second networking device.

Distributed proxy addressing operations

An addressing redirection mechanism is initiated at a switch or a router in a computing network in order to enable the switch to perform one or more distributed proxy addressing operations on behalf of a connected router. An address request transmitted from a first host device to a second host device to obtain addressing information of the second host device is received at the switch, and the switch inspects the address request to identify addressing information for the first host device. The switch is configured to forward the addressing information for the first host device to the router.

Growing community of inventors

San Jose, CA, United States of America

Sukhesh Halemane