Arista Networks, Inc.

Tarun Jaswanth

Manish Singhvi

Sourav Basu

Kaustav Majumdar

Systems and methods are disclosed for acknowledgement-based retirement of expired secure association keys (SAK). A new SAK is generated by a key server. The new SAK is transmitted to members of a connectivity association (CA). The new SAK for key server ingress traffic is installed. An ingress SAK installation acknowledgement is received from the members of the CA. The new SAK for key server egress traffic is installed at the key server, based on receiving the ingress SAK installation acknowledgement from the members of the CA. A key server egress SAK installation notification is transmitted to the members of the CA A prior secure association key is retired after a configurable SAK retirement buffer delay in response to an earlier occurrence of either: receipt of an egress SAK installation acknowledgement from the members of the CA and expiration of a SAK retirement buffer delay, or expiration of a SAK retirement timeout.

Acknowledgement-based key retirement

A method for managing a group of secured network devices. The method includes detecting, by a switchover agent operating in a secured network device of the group of secured network devices, a switchover between two supervisors operating in the secured network device, based on the detecting: generating a modified heartbeat packet, wherein the modified heartbeat packet comprises a suspension time that is significantly larger than a heartbeat interval, and sending the modified heartbeat packet to a second secured network device of the group of secured network devices.

Growing community of inventors

Bengaluru, India

Tarun Jaswanth