Avaya Inc.

Extreme Networks, Inc.

Rockstar Consortium US LP

Rockstar Bidco, LP

Zenon Kuc

John Mead

John Seligson

Roger Lapuh

Karthik S Gopalakrishnan

Greg J Landry

Paul Unbehagen

Rudolph J Maske

Curtis Santos

Timothy G Fitch

Keshav G Kamble

Hesham Elbakoury

Yan Yang

Stephen Thomas Dansey

Implementations relate to configuration of networks using switch device access of a remote server. In some implementations, a method includes sending a request from an edge configuration device to an access control server, where the request requests shortest path bridging (SPB) configuration information for a detected end device connected to the edge configuration device, and where the edge configuration device is connected to an SPB network. The method receives at the edge configuration device the SPB configuration information for the end device from the access control server. The edge configuration device is configured to provide the end device access to the SPB network.

Configuration of networks using switch device access of remote server

Embodiments generally relate to enabling configuration in networks. In one embodiment, a method includes receiving a message from an edge configuration device, wherein the message contains shortest path bridging (SPB) configuration information. The method also includes performing an intermediate system-to-intermediate system (IS-IS) configuration in response to receiving the message.

Enabling configuration in networks

Implementations relate to authentication of end devices in networks. In some implementations, a method includes receiving identity information at an edge configuration device from an end device via a connection, where the identity information identifies the end device or one or more users associated with the end device. A request is sent from the edge configuration device to an access control server connected to the network in response to receiving the identity information, where the request requests authentication for the end device. Authentication is received at the edge configuration device from the access control server for the end device to connect to a network connected to the edge configuration device.

Authentication of client devices in networks

Embodiments generally relate to enabling encapsulation in networks. In one embodiment, a method includes receiving a message from an edge configuration device, wherein the message contains shortest path bridging (SPB) configuration information. The method also includes performing provider backbone bridge (MAC-in-MAC) encapsulation in response to receiving the message.

Performing MAC-in-MAC encapsulation using shortest path bridging configuration information

Implementations relate to configuration of networks using client device access of a remote server. In some implementations, a method includes requesting a management server from an end device for shortest path bridging (SPB) configuration information for the end device to communicate on an SPB network, where the end device communicates with the management server over a non-SPB connection. The SPB configuration information is received from the management server, and the SPB configuration information is sent to an edge configuration device connected to the end device, where the SPB configuration information causes configuration of the edge configuration device to allow communication of the end device on the SPB network.

Shortest path bridging (SPB) configuration of networks using client device access of remote

A VLAN is implemented with a logical hub and spoke topology that obviates local switching. Member devices are connected to a hub device such as a router via intermediate devices such as Layer 2 switches that support individual IP subnets within the VLAN. The Layer 2 switch does not allow bridging, so there is no IP subnet broadcast domain. Further, the Layer 2 switch implements only a single logical broadcast uplink port which is connected to the router. The Layer 2 switch also implements only point-to-point downlink ports, i.e., to individual member devices. Consequently, all traffic is forced to flow through the router, e.g., broadcast traffic, multicast traffic and traffic of unknown destination received by the Layer 2 switch from a member device is only flooded to the router, and the router performs intra-subnet routing in addition to routing between subnets and between VLANs. The router subjects all traffic to security measures and provide services including packet inspection, firewall, policing, metering, accounting, anti-virus, marking, filtering and encryption, and thereby reduce or eliminate the drawbacks associated with local switching.

Secure VLANs

Configuration of networks using client device access of remote server

Embodiments generally relate to message transmission in networks. In one embodiment, a method includes enabling a user to provide shortest path bridging (SPB) configuration information. The method also includes receiving the SPB configuration information from the user. The method also includes sending the SPB configuration information to an edge server device.

Message transmission in networks

A scalable Ethernet switch includes modules which can be interconnected to provide a single, virtual switch. The modules may be of uniform physical size and shape relative to a standard telecommunications rack. When greater capacity is required, an additional module is mounted in a rack and interconnected with the other modules, e.g., in a bi-directional ring. Enhanced port density is provided by interconnecting the modules with 12 GbE links which operate on standard 10 GbE wiring and connectors. Consequently, throughput between modules in increased relative to standard 10 GbE links without increasing form factor. Further, transmission power control can be implemented such that modules of the virtual switch may be physically adjacent or separated by distances of several meters.

Modular scalable switch architecture

A modified Ethernet packet includes a MAC address unlearn flag. A port receiving the packet unlearns the specified MAC address, i.e., removes the corresponding entry from its forwarding table. Unlearn packets may be generated by a switch CPU in response to detection of a port failure in order to remove entries associated with the failed port. The modified Ethernet packet may alternatively, or also, include an attribute learn field. An Ethernet switch is operable to learn the specified attribute in response to receipt of the packet. Attributes that may be specified include: copy-to-CPU; static; class-of-service; source-discard; destination-discard; and L3. The copy-to-CPU attribute is operable to prompt copying of subsequent packets observed with the same SA to the CPU. The static attribute is operable to prompt prevention of a specified MAC address from being removed from a forwarding table due to aging. The class-of-service attribute is operable to prompt override of a packet class-of-service value with a specified value for subsequent packets of a specified MAC address. The source-discard attribute is operable to prompt discard of subsequent packets having a specified SA. The destination-discard attribute is operable to prompt discard of subsequent packets having a specified DA. The L3 attribute is operable to prompt packets destined for a specified MAC address to be routed rather than switched.

Learning and unlearning in a network switch

Traffic pending delivery to sleeping Mobile Units is buffered in an Access Controller. When a particular sleeping Mobile Unit wakes up, the Access Point with which the Mobile Unit is associated signals to the Mobile Unit indicating that traffic is buffered for that Mobile Unit. In response to signaling from the Mobile Unit via the Access Point, the Access Controller forwards the traffic buffered for that Mobile Unit. In particular, the traffic is transmitted from the Access Controller to the Access Point, and then from the Access Point to the Mobile Unit. A limit may be placed on the amount of time during which the Access Controller buffers traffic for a particular Mobile Unit.

WLAN access controller packet buffering

A switching device, method, and computer program utilizes a copy technique to detect unauthorized access to a communications network. An interface of the switching device is connected to receive an original packet and copy the original packet to create a copied packet. A processor within the switching device is operable to analyze information related to the original packet or the copied packet to detect an anomaly related to the original packet or the copied packet. The processor is further operable to cause the copied packet to be forwarded to an intrusion detection system within the communications network upon detecting the anomaly.

Growing community of inventors

San Jose, CA, United States of America

Zenon Kuc