Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: A switching device supports a mixed mode of operation using both layer 2 and layer 3 multicast forwarding tables for multicast forwarding of packets. In the mixed mode of operation the switching device programs multicast forwarding entries in a corresponding layer 2 or layer 3 table depending on a type of protocol to be used for multicast forwarding. The switching device programs multicast forwarding entries in the layer 3 table for multicast packets forwarded using layer 3 routing protocols, and in the layer 2 table for multicast packets forwarded using layer 2 protocols. The switching device converts layer 3 multicast information to layer 2 multicast information before programming multicast forwarding entries in the corresponding layer 2 table.

Abstract: A network comprises a plurality of switches coupled in a ring topology, wherein each adjacent pair of switches in the plurality of switches forms a multiple link aggregation group interswitch connection therebetween and forms a ring resiliency protocol logical node. A first switch in a first adjacent pair of the plurality of switches is coupled via a first link to a second switch in a second adjacent pair of the plurality of switches, and a third switch in the first adjacent pair is coupled via a second link to a fourth switch in the second adjacent pair. In the event of a failure of the first link, a packet flow to be transmitted from the first switch over the first link is redirected from the first switch to the third switch for transmission over the second link to the fourth switch.

Abstract: Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

Abstract: Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

Abstract: A system for providing at least one node of an n-node multi-switch link aggregation group (MLAG) includes a packet forwarding device for receiving a packet destined for at least one n-node MLAG, n being an integer greater than 2. The packet forwarding device includes a packet forwarding database for storing packet forwarding rules for the at least one n-node MLAG. The packet forwarding device further includes a processing element for forwarding, blocking forwarding of, or redirecting the packet in accordance with one of the packet forwarding rules defined for the n-node MLAG group in the packet forwarding database.

Abstract: A switching device supports a mixed mode of operation using both layer 2 and layer 3 multicast forwarding tables for multicast forwarding of packets. In the mixed mode of operation the switching device programs multicast forwarding entries in a corresponding layer 2 or layer 3 table depending on a type of protocol to be used for multicast forwarding. The switching device programs multicast forwarding entries in the layer 3 table for multicast packets forwarded using layer 3 routing protocols, and in the layer 2 table for multicast packets forwarded using layer 2 protocols. The switching device converts layer 3 multicast information to layer 2 multicast information before programming multicast forwarding entries in the corresponding layer 2 table.

Abstract: A system for providing at least one node of an n-node multi-switch link aggregation group (MLAG) includes a packet forwarding device for receiving a packet destined for at least one n-node MLAG, n being an integer greater than 2. The packet forwarding device includes a packet forwarding database for storing packet forwarding rules for the at least one n-node MLAG. The packet forwarding device further includes a processing element for forwarding, blocking forwarding of, or redirecting the packet in accordance with one of the packet forwarding rules defined for the n-node MLAG group in the packet forwarding database.

Abstract: A switching device receives a data packet and searches for a layer 3 multicast destination address specified in a header of the received data packet in a layer 3 multicast forwarding database table. The switch searches for a corresponding port list in a layer 3 egress table if the layer 3 multicast destination address is found. However, if the layer 3 multicast destination address is not found, the switch searches for a layer 2 destination address specified in header of the received data packet in a layer 2 multicast forwarding database table, and the switch searches for a port list in a layer 2 egress table if the layer 2 destination address is found. If neither the layer 3 or layer 2 destination address is found in the searches, the switch discards or floods the received data packet out all ports of the switching device.

Abstract: A first switch at a first edge of an MPLS network establishes a VPLS pseudo-wire over a plurality of label switched paths (LSPs) of the MPLS network that couple the first switch to a second switch at a second edge of the MPLS network. The first switch further load balances data to be transmitted across the VPLS pseudo-wire over the plurality of LSPs. The first switch accomplishes this by maintaining at a first table an indication that the VPLS pseudo-wire traffic is to be transmitted over the plurality of LSPs and further identifying in the first table a pointer to a second table maintaining a plurality of LSP entries corresponding to the respective plurality of LSPs. The first switch then identifies at the second table a pointer to a third table maintaining a plurality of entries, wherein each of the plurality of entries identifies a next hop index.

Abstract: A network switch has a plurality of data tables accessible to a plurality of networking protocols. Each of the plurality of data tables contains a plurality of entries. One of the plurality of data tables is selected in which to reserve a respective one of the plurality of entries as an entry for use by one of the plurality of networking protocols. The utilization of each of the plurality of data tables is compared responsive to an operation of the one of the plurality of networking protocols that causes a need to reserve the entry, and one of the plurality of data tables is selected in which to reserve the entry, based on the comparison.

Abstract: Methods, systems, and computer readable media for improved multicast scaling through policy based redirection are disclosed. According to one method, a packet belonging to an Internet protocol multicast (IPMC) stream is received, where the packet includes packet routing information. A lookup is performed in a IPMC forwarding database (FDB) and, in response to failing to locate an entry in the IPMC FDB, an attempt is made to insert the packet routing information in the IPMC FDB. In response to failing to insert the packet routing information in the IPMC FDB, a packet redirection rule is created based on the packet forwarding information.

Abstract: Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

Abstract: Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for improved multi-switch link aggregation group (MLAG) convergence. According to one aspect of the subject matter described herein, a system for improved multi-switch link aggregation group (MLAG) convergence is provided. The system includes a packet forwarding device. The packet forwarding device includes a packet processor for receiving a packet and determining that the packet is destined for a port of the packet forwarding device associated with an MLAG group. The packet forwarding device further includes an MLAG module associated with the packet processor for determining that the port is inactive, and in response to determining that the port is inactive, performing a convergence operation, wherein the convergence operation includes redirecting, using a redirection filter, the received packet towards an active port associated with the MLAG group.

Abstract: Methods, systems, and computer program products for selective layer 2 port blocking using layer 2 source addresses are disclosed. According to one method, a layer 2 frame is received. An I/O port block list is identified based on a layer 2 source address in the layer 2 frame. A set of ports to which the layer 2 fame should be forwarded is identified. The frame is blocked from being forwarded to ports in the set that are also in the I/O port block list.

Abstract: The subject matter described herein includes a packet forwarding device that implements next hop scaling. Rather than storing a complete set of next hop bindings at each packet processor, the storage of next hop bindings is distributed among packet processors in the packet forwarding device such that each packet processor stores next hop bindings for the hosts that are directly connected to the packet processor. For hosts that are not directly connected to a packet processor, the packet processor stores relay entries. Because of the distributed storage of next hop bindings, the number of hosts that can be served by a single packet forwarding device is increased over packet forwarding devices where each packet processor stores a complete set of next hop bindings for all connected hosts.