Abstract: According to an example, in a method and apparatus for notifying a LSP, the downstream LSR detecting the link failure on the work LSP sends a SF message on the direction of the work LSP, so that the upstream LSR detecting the link failure on the work LSP receives the SF message and sends the packet via the protection LSP according to the SF message.

Abstract: A method of zero configuration for a virtual distributed device in a distributed network is disclosed. A plurality of peer devices are added as virtual devices to a network device. Configuration information is imported to the network device. A peer group comprising the plurality of peer devices, and corresponding topology of the peer group, are established in the network device. A connection between the network device and one of the plurality of peer devices is established via an uplink switch, the plurality of peer devices being connected to one another by virtual links. The network device distributes the configuration information to the plurality of peer devices in accordance with the established topology via the peer device connected to the uplink switch.

Abstract: This disclosure provides methods and devices for Graceful Restart (GR) in a network with multiple GR Restarters that include a first GR Restarter and at least one second GR Restarter corresponding to the first GR Restarter. After receiving routes from all normal neighbor network devices of the first GR Restarter, the first GR Restarter performs route selection to determine first selected routes, and sends the first selected routes to the at least one second GR Restarter. After receiving routes from the at least one second GR Restarter, the first GR Restarter performs route selection to determine second selected routes, updating a local Forwarding Information Base (FIB) at the first GR Restarter with the second selected routes, and sends the second selected routes to all neighbor network devices of the first GR Restarter. The first GR Restarter directly connects with the at least one second GR Restarter corresponding to the first GR Restarter.

Abstract: Providing a VLAN virtual interface of a default VLAN as a VLAN virtual interface of a layer-3 Ethernet interface provided on an apparatus, assigning an interface MAC address for the layer-3 Ethernet interface, setting a layer-3 interface entry including at least the interface MAC address of the layer-3 Ethernet interface and a VLAN ID of the default VLAN, providing a VLAN virtual interface of a layer-3 Ethernet sub-interface provided on the apparatus based on a binding VLAN of the layer-3 Ethernet sub-interface, assigning an interface MAC address to the layer-3 Ethernet sub-interface, setting a layer-3 sub-interface entry including at least the interface MAC address of the layer-3 Ethernet sub-interface and a VLAN ID of the binding VLAN, receiving a packet from one interface of the apparatus, and performing layer-3 forwarding for the packet if the layer-3 interface entry or the layer-3 interface entry matching with a destination MAC address and a VLAN ID of the packet.

Abstract: According to an example, in a method for MAC address distribution by an apparatus, a MAC address is received in the apparatus, in which the apparatus includes a data store on which is stored a local slice set containing a plurality of slices, and in which each of the plurality of slices is assigned a respective slice identifier. An address value for the received MAC address may be determined and a correlation between the determined address value and one of the slice IDs of the plurality of slices may be identified. In addition, the received MAC address may be stored in the slice having the slice identifier identified as being correlated to the determined address value.

Abstract: A method and an edge device for learning a Medium Access Control (MAC) address are provided. According to an example, based on a request message from a first node to a second node, a session cache item is created in the edge device. The session cache item includes: IP addresses of the first and second nodes, and a first relationship between a MAC address of the first node and an output port corresponding to the first node. Based on a response message from the second node to the first node, the session cache item is updated to include a second relationship between a MAC address of the second node and an output port corresponding to the second node. The first and second relationships are then provided to a data plane of the edge device to facilitate data packet forwarding between the first node and the second node.

Abstract: When updated routing information is advertised, attributes of the updated routing information are advertised in a first UPDATE message and prefixes of the updated routing information are advertised in a second UPDATE message.

Abstract: According to an example, a method for forwarding an Ethernet packet may include receiving an Ethernet packet having a destination MAC address that is a MAC address of a gateway, selecting a port from multiple ports, wherein each of the ports of the multiple ports connects to one member device of a VRRP router that is working as the gateway; and sending the Ethernet packet via the selected port.

Abstract: According to an example, a virtual port is configured for a current virtual device (VD) to interconnect the current VD with other VDs. The virtual port may be a layer 3 port and route learning and advertising of port information may be performed through the virtual port.

Abstract: A SDN controller may receive a packet from a terminal device and may update an IP/MAC address mapping record and a terminal access location record of the terminal device. The SDN controller may periodically send an ARP request packet and may keep the IP/MAC address mapping record and the terminal access location record of the terminal device alive. The SDN controller may also periodically age the IP/MAC address mapping record and the terminal access location record of the terminal device.

Abstract: According to an example, a reauthentication or reassociation message carrying a roaming group information may be received from a wireless client (STA) by an AC when the STA is roaming. In addition, the AC may determine, according to the roaming group information and the received reauthentication or reassociation message, whether the STA is roaming between roaming groups or within a roaming group. In response to a determination that the roaming is between roaming groups, an extension authentication protocol (EAP) reauthentication process may be initiated and in response to a determination that the roaming is within a roaming group, a Key Cache method may be adopted to authenticate the STA.

Abstract: A method and a network device for preventing service disruption during a restart of a line card. The line card including a CPU control system and a forwarding system. Information on the CPU control system is stored in a predetermined storage and a flag is set prior to the restart of the line card. The stored information includes configuration information of the forwarding system and protocol state information of the CPU control system. The CPU control system is restarted while the forwarding system is maintained in a state of providing forwarding service. Upon detecting the flag is set during the restart of the CPU control system, the stored information is restored on the CPU control system.

Abstract: A method and device for preventing a roaming user terminal from re-authentication are provided. The method includes: when Virtual Local Area Network (VLAN) of a roaming user terminal changes, change information of the roaming user terminal is reported to a Broadband Remote Access Server (BRAS) via an Access Controller (AC) and the BRAS reports modified information of the roaming user terminal to an Authentication, Authorization, Accounting server (AAA server).

Abstract: An example of the present disclosure includes a Group Member (GM) registering on a Key Server (KS) in a Group Encrypted Transport Virtual Private Network (GET VPN). The KS is to manage at least one group, and GMs belonging to the same group have the same group ID. The KS receives a group ID and a Security Association, SA, policy list supported by a GM sent by the GM. The KS, according to the group ID, determines a KS SA policy list corresponding to the group, and matches the SA policy list supported by the GM with the KS SA policy list according to a priority. A group SA policy with the highest priority is sent the GM.

Abstract: Methods and network devices are provided for forwarding a message in a layer 2 edge network that includes an access server device connected to sender and gateway devices. Forwarding information including destination IP address, destination MAC address, destination VLAN ID and destination device ID is established. A message is received by the access server device from the sender device. The message includes first destination MAC address, first destination IP address, first destination VLAN ID, and first destination device ID. When the first destination MAC address of a received message is a MAC address of the gateway device, the received message is forwarded according to the first destination MAC address, first destination VLAN ID and first destination device ID. Otherwise the message is modified and forwarded according to second destination MAC address, second destination VLAN ID, and second destination device ID determined to be associated with the first destination IP address.

Abstract: In a portal authentication method, a DHCP request message sent by a terminal is received by an AC. In response to finding that a user of the terminal is an unauthenticated user, a private network IP address is assigned to the terminal. After portal authentication of the terminal is finished, a wireless connection of the terminal is terminated by the AC. When a DHCP request message sent by the terminal again is received, a determination that the user of the terminal passes the authentication is made by the AC, a public network IP address is assigned to the terminal, and an accounting request message is sent to a RADIUS server. After finding that the terminal is offline, an accounting stop message is sent by the AC to the RADIUS server, the wireless connection of the terminal is disconnected, and the public network IP address is released.

Abstract: The present invention discloses a method of dual stack access, wherein a network device authenticates the first protocol address of a requesting client, stores the user name, first protocol address, and address status information of the client in the user information table if the authentication succeeds, assigns a second protocol address to the client, stores this second protocol address and address status information in the user information table, generates control rules for the client according to its user information, and controls dual stack access of the client according to the rules. This invention provides effective authentication-based access control of dual stack users.

Abstract: A method and system for managing protocol connection in a PBB network and a BEB node. A first BEB node in the PBB network receives a Pseudo Wire (PW) connection requesting message sent by a second BEB node which has a PBB instance. When it is determined according to the PW connection requesting message that the first BEB node has the same PBB instance as that of the second BEB node, the first BEB node sends a PW response message back to the second BEB node and establishes protocol connection between the first BEB node and the second BEB node for forwarding backbone frame.

Abstract: A method and device of link aggregation in computer networking, wherein data originally scheduled for forwarding by a scheduled data port are diverted for forwarding by a backup data port assigned to the scheduled data port upon detection that the scheduled data port is connected to a data link which is not capable of data traffic even though the data port is still a selected port.

Abstract: A method and device for processing source role information in which a source role tag is inserted into a packet as an inner VLAN tag of the packet and used to perform role based access control processing for the packet.