Cisco Technology, Inc.

Other

Victor Manuel Moreno

Sanjay Kumar Hooda

Prakash C Jain

Satish Kumar Kondalam

Dhananjaya Rao

Hasmit S Grover

Fabio Rodolfo Maino

Shyam N Kapadia

Marc Portoles Comeras

Vrushali Ashtaputre

Muninder Singh Sambi

Tarunesh Ahuja

Lev Shvarts

Girija Raghavendra Rao

Marc Binderberger

Dino Farinacci

Vinay Saini

Liqin Dong

Anand K Oswal

Sridhar Subramanian

Rex Emmanuel Fernando

Reshad Rahman

Vina Ermagan

Khalil A Jabr

Gaurav Badoni

Murali Venkateshaiah

Sanjay Sane

Atri Indiresan

Sameer Merchant

Patrice Bellagamba

Anoop Vetteth

Nehal Bhau

Tony Speakman

Balaji Pitta Venkatachalapathy

Syam Sundar Appala

Nair Venugopal

S Scott Van De Houten

Ian Bruce Bernard Cox

Paul M Quinn

Abhijit Patra

Nagaraj Bagepalli

Dileep Kumar Devireddy

Ronak K Desai

Rajagopalan Janakiraman

Surendra M Kumar

Nilesh Shah

Satyam Sinha

Alberto Rodriguez Natal

Lifen Tian

Douglas Alan Gourlay

Azeem Suleman

Darrin Joseph Miller

Roberto Mitsuo Kobo

Padmanabhan Krishnan

Tameen Khan

Johnson Leong

Jason Frazier

Rishabh Parekh

Patel Amitkumar Valjibhai

Shivangi Sharma

Mark Berly

Kaushik Kumar Dam

Mohammed Javed Asghar

Raja Janardanan

Massimiliano Ardica

Senthil Kenchiah

Vrishab Sikand

Mark Montañez

Robert Horst Starmer

Errol Fenton Roberts

Suvil Singh Deora

Laxmi Mukund

Muhammad Ahmad Imam

Sandesh Kumar Narappa Bheemanakone

John Lo

Rex Emmauel Fernando

Malathi A Srinivasan

Rohan Grover

Brent P Mucci

Hatem Mohammad Ra Abouzeid

Ray Blair

Robert Starmer

Dhanamjaya Rao

Techniques for communication network routing include receiving, at a routing device associated with a first site in an overlay communication network, a dynamic parameter value associated with each of a plurality of additional sites in the overlay communication network. The plurality of additional sites are each configured to provide a first network service for a computing device in the first site. A second site in the overlay communication network is selected, from among the plurality of additional sites, based on a first dynamic parameter value associated with the first site and a received second dynamic parameter value associated with the second site. The first network service is provided from the second site for the computing device, based on the selecting the second site.

Service border routing based on location in multisite fabric networks

A wireless telemetry process (WTP) may obtain telemetry data which includes signal strength information associated with a plurality of fabric wireless access points (APs) of a network fabric. The WTP may identify that a signal strength between a current AP and a wireless endpoint is below a threshold. In response, the WTP may select addresses of a set of handoff candidate APs for the wireless endpoint based on the signal strength information. The WTP may communicate, to a map server, a message to register, as entries in a replication list, a plurality of routing locators associated with the addresses of the set of handoff candidate APs for association with an address of the wireless endpoint. The map server may notify a router of the replication list, for replicating packets intended for the wireless endpoint to a plurality of routers that are connected to the set of handoff candidate APs.

Seamless handoff between wireless access points (APs) with use of pre-convergence packet replication

Methods and devices configure edge nodes of a virtual network overlay to continuously forward data plane traffic flows between client devices of a common subnet over the course of at least some of the edge nodes being EF-configured. TF-configured edge nodes and EF-configured edge nodes both play roles in unilaterally inducing address discovery by sending to client devices address discovery responses that were not prompted by address discovery requests. TF-configured edge nodes then handle ensuing address discovery requests by proxy, and subsequently handle certain traffic flows according to an EF-compatible forwarding mode, while EF-configured edge nodes continue to forward traffic flows by IP routing normally. This averts throughput of data plane traffic over the network overlay being reduced as a side effect of the heterogeneously configured edge nodes, and averts the possibility of client devices broadcasting address discovery protocol requests as a result of remote client devices being unreachable.

Inter-compatible forwarding modes in network fabric overlays

Techniques for network routing border convergence are described. Backup paths for external connections for a network are established and provide for a temporary path for network traffic during network routing convergence, preventing traffic loss at network border nodes.

Border node traffic convergence

Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.

Software defined access fabric without subnet restriction to a virtual network

Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

Service chaining in fabric networks

This disclosure describes techniques and mechanisms for providing hybrid cloud services for enterprise fabric. The techniques include enhancing an on-demand protocol (e.g., such as LISP) and allowing simplified security and/or firewall service insertion for datacenter servers providing those services. Accordingly, the techniques described herein provide hybrid cloud services that work in disaggregated, distributed, and consistent way, while avoiding complex datacenter network devices (e.g., such running overlay on TOR), replacing and moving the functionality to on demand protocol enabled servers, which intelligently receive the required mappings as well as registers and publishes the service information to intelligently interact with the network.

Hybrid cloud services for enterprise fabric

A method for assisting communication of a source host upon movement from a first Data center (DC) to a second DC is disclosed. The method includes identifying that the source host has moved from the first DC to the second DC, ensuring that packets identifying a source as the source host in the second DC are copied to a control plane network element, and, for a first destination host identified in a first packet copied to the control plane network element and identified as a host that is not in the second DC, updating an Address Resolution Protocol (ARP)/Neighbor Discovery Protocol (NDP) cache of the source host by sending, to the source host, a first ARP message/unsolicited neighbor advertisement specifying a Media Access Control (MAC) address of an edge router associated with the source host in the second DC as a destination MAC address for the first destination host.

Refresh of the binding tables between data-link-layer and network-layer addresses on mobility in a data center environment

This disclosure describes techniques for software-defined service insertion. The techniques include a method of configuring a network for service insertion. The techniques include processing a master policy correlating an endpoint group pair, of source endpoint group and destination endpoint group, to a service graph. The service graph indicates a template service chain, and the template service chain indicates an ordering of a plurality of services. Processing the master policy includes disaggregating the master policy into at least one location specific policy, each of the at least one location specific policy corresponding to a separate location in the network and including traffic steering directives corresponding to a portion of the plurality of services associated with the separate location. The techniques further include causing each of the at least one location specific policy to be stored in association with the separate location to which that location specific policy corresponds.

Software-defined service insertion for network fabrics

Techniques and architecture are described that utilize switchport protected flags to provide switchport protected functionality across network devices, e.g., switches, routers, etc., in fabric networks. For example, a first port of a first network device of a fabric network receives a packet from a first host destined for a second host. The second host is onboarded to the fabric network via a second port of a second network device. It is determined (i) if a first protected flag associated with the first port of the first network device is set as true and (ii) if a second protected flag associated with the second host is set as true. Based at least in part on (i) the first protected flag associated with the first port being set as true and (ii) the second protected flag being set as true, the first network device drops the packet.

Providing switchport protected functionality across enterprise access (fabric) networks

This disclosure describes techniques for implementing network address translation as a distributed service over the nodes of a logical network fabric, such as a software-defined network fabric. A method includes registering, by an edge node of a network, an IP address of a client device. The method further includes forwarding, by the edge node, the registered IP address to a control plane of the network. The method further includes checking, by the control plane, a network address translation policy. The method further includes recording, by the control plane, translations between the registered IP address and an allocated IP address in a translation table, each of the translations being related to the edge node. The method further includes returning, by the control plane, the translations between the registered IP address and the allocated IP address to the edge node.

Distributed network address translation over network environments

Growing community of inventors

Carlsbad, CA, United States of America

Victor Manuel Moreno