Abstract: An example of a computing system is described herein. The computing system includes a plurality of network security devices. The computing system also includes a network switch configured to direct network traffic. The computing system further includes a controller coupled to the network switch. The controller is to instruct the network switch in directing network traffic to the plurality of network security devices.

Abstract: In a method of managing access to a network, a MAC based authentication operation is implemented in determining whether to grant a user device access to the network. In addition, a user is enabled to self-register a user device into a database of authorized users in response to the user being denied access through the MAC based authentication operation and being listed as a valid user in a directory of active network users. Moreover, the directory of active network users is monitored for modification of information pertaining to the users listed in the directory of active network users and the database of authorized users is modified in response to a determination that user information pertaining to at least one user listed in the directory of active network users that affects the database of authorized users has been modified.

Abstract: An example system may include a controller to receive traffic of a host from a network device. The controller may include a network access control (NAC) unit and a network unit. The NAC unit may perform NAC authentication of the host. The network unit may indicate to the network device to allow traffic from the host, if the host is authenticated by the NAC unit.

Abstract: Example implementations relate to updating a client-based port filter table using a network device. For example, an apparatus may include a processor to receive a client device connection information message from a network switching device. The processor further to direct, via a configuration message, the network switching device to update a first entry of a client-based port filter table associated with a client device. The first entry includes an egress physical port set of the network switching device usable to output a packet sourced by the client device independent of a forwarding path of the packet.

Abstract: A method for packet forwarding through a communication link of a distributed link aggregation group (LAG) in a mesh network using a path tag is described herein. A packet is received on a non-mesh port of a first network device of the mesh network. A Media Access Controller (MAC) destination address of the packet that is associated with a plurality of network devices in the mesh is determined. Each network device of the plurality of network devices includes a link grouped in the distributed LAG. A destination mesh device from the plurality of network devices is selected. A plurality of available paths between the first network device and the destination mesh device are determined. A path of the plurality of available paths is selected. A tag associated with the selected path is inserted into the packet, and the packet is forwarded along the selected path.

Abstract: A method of transmitting a packet from a distributed trunk (DT) switch and a computer-readable medium storing instructions therefor is described. The method comprises receiving a packet from a device connected to the DT switch, transmitting the received packet via a non-distributed trunk port of the DT switch, and forwarding the received packet via a DT port of the DT switch for each received packet based on a determination of whether to forward the received packet based on an address of the received packet. The method also comprises forwarding the received packet via a distributed trunk interconnect port for each received packet received via one of a non-DT port and a DT port.

Abstract: Methods, network controllers, and machine-readable and executable instructions are provided to determine a secure path between a source device and a destination device. The secure path may be via a plurality of network devices. The secure path may be determined based on a security capability of each of the plurality of network devices in the secure path. Data may be forwarded between the source device and the destination device, via the plurality of network devices, based on the determined path.

Abstract: Examples disclose a system comprising an integrated circuit to determine whether a data packet should be processed by a shared security engine associated with a secure link. Additionally, the examples disclose a first media access control (MAC), associated with the shared security engine, to receive the data packet for transmission on the secure link based on the determination the data packet should be processed by the shared security engine.

Abstract: A method of transmitting an upstream communication packet from a distributed trunk (DT) switch is described. The method comprises receiving a packet from a device connected to a DT port of the DT switch; and transmitting the received packet via a non-DT port of the DT switch if the DT switch is the owner of the device and transmitting the received packet via a DT interconnect (DTI) port of the DT switch if the DT switch is not the owner of the device.

Abstract: An example switch in accordance with the present disclosure is to process a command to determine desired identification information; generate a link layer discovery protocol (LLDP) frame based at least in part on the desired identification information, wherein the LLDP frame comprises an optional type-length-value (TLV) that causes a second switch to enable a light source; and transmit the LLDP to the second switch.

Abstract: Embodiments herein relate to transmitting specific traffic along a blocked link. A status of links between switches of a network is monitored. The status of the links is one of blocked and non-blocked. A blocked link is not used by a Spanning Tree Protocol (STP). At least one of the network switches is configured to transmit the specific traffic along the blocked link.

Abstract: A non-transitory computer-readable medium for managing power consumption in a network of network devices is disclosed. The computer-readable medium stores instructions, that when executed by one or more processors, cause the one or more processors to perform certain operations. The operations include monitoring network data traffic, establishing a network power management policy based on the monitored data traffic, and enforcing the network power policy. The enforcing is carried out by centrally managing a powered state of a portion of the network based on power consumption criteria.

Abstract: Example embodiments disclosed herein relate to a discovery message, the discovery message including information related to an attribute of a port of a network device sending the discovery message. A determination is made whether to enable/disable a feature at a port of the network device based on the information related to the attribute of a port of the network device and a port of a neighbor network device.

Abstract: A method of transmitting an upstream communication packet from a distributed trunk (DT) switch is described. The method comprises receiving a packet from a device connected to a DT port of the DT switch; and transmitting the received packet via a non-DT port of the DT switch if the DT switch is the owner of the device and transmitting the received packet via a DT interconnect (DTI) port of the DT switch if the DT switch is not the owner of the device.

Abstract: An example method includes creating a plurality of redundant, non-looping paths to a plurality of switches, and providing information to the plurality of switches about the plurality of redundant, non-looping paths. The method further comprises assigning each of a plurality of clients to one of the plurality of redundant, non-looping paths, and providing information to the plurality of switches about which of the plurality of redundant, non-looping paths each client of the plurality of clients is assigned to. Then, in response to receiving a packet from a client of the plurality of clients, the method comprises transmitting the packet on one of the plurality of redundant, non-looping paths to one of the plurality of switches based at least in part on which of the plurality of redundant, non-looping paths the client is assigned to.

Abstract: A method of transmitting an upstream communication packet from a distributed trunk (DT) switch is described. The method comprises receiving a packet from a device connected to a DT port of the DT switch; and transmitting the received packet via a non-DT port of the DT switch if the DT switch is the owner of the device and transmitting the received packet via a DT interconnect (DTI) port of the DT switch if the DT switch is not the owner of the device.

Abstract: Example embodiments disclosed herein relate to passing or forwarding a frame. A frame is received from a first device. The frame includes a first header including a destination Media Access Control (MAC) address followed by a second header including a source MAC address followed by a third header including an Ethertype. The frame is passed or forwarded to a second device based on the Ethertype.

Abstract: A method includes reading content of network traffic that arrives at a network port of a network switch of a mesh of network switches. A hash algorithm is applied to the read content to indicate a path to a destination network switch of the mesh, the hash algorithm being common to all network switches of the mesh. The network traffic is forwarded via a network port that is associated with the indicated path.

Abstract: A method of reducing power consumption in a network. A first network device powers down or reduces the port speed of a port if said port is blocked by a loop mitigation protocol.

Abstract: A method for packet forwarding through a communication link of a distributed link aggregation group (LAG) in a mesh network using a path tag is described herein. A packet is received on a non-mesh port of a first network device of the mesh network. A Media Access Controller (MAC) destination address of the packet that is associated with a plurality of network devices in the mesh is determined. Each network device of the plurality of network devices includes a link grouped in the distributed LAG. A destination mesh device from the plurality of network devices is selected. A plurality of available paths between the first network device and the destination mesh device are determined. A path of the plurality of available paths is selected. A tag associated with the selected path is inserted into the packet, and the packet is forwarded along the selected path.