Abstract: An auto fabric configuration (AFC) mode is provided to enable network elements, when added to a data communication network, to discover each other, using TLVs added to standard protocols. The AFC mode further allows for automatic configuration of the network fabric. For example, core features, such as link aggregation, Virtual Local Area Networks (VLANs) and Shortest Path Bridging (SPB) adjacencies, can be automatically configured.

Abstract: WLAN controllers in a same mobility domain are able to dynamically discover other WLAN controllers in the same mobility domain across one or more layer 2 or layer 3 network boundaries. A WLAN controller in the mobility domain determines an address of at least one seed WLAN controller in the mobility domain from a configuration server. The WLAN controller registers with the at least one seed WLAN controller in the mobility domain and receives information for other WLAN controllers in the mobility domain from the at least one seed WLAN controller. The WLAN controller also receives synchronized wireless device information that allows a wireless device to roam from one AP adopted by the WLAN controller in a first access network to another AP adopted by another WLAN controller in a second different access network in the same mobility domain.

Abstract: WLAN controllers in a same mobility domain are able to dynamically discover other WLAN controllers in the same mobility domain across one or more layer 2 or layer 3 network boundaries. A WLAN controller in the mobility domain determines an address of at least one seed WLAN controller in the mobility domain from a configuration server. The WLAN controller registers with the at least one seed WLAN controller in the mobility domain and receives information for other WLAN controllers in the mobility domain from the at least one seed WLAN controller. The WLAN controller also receives synchronized wireless device information that allows a wireless device to roam from one AP adopted by the WLAN controller in a first access network to another AP adopted by another WLAN controller in a second different access network in the same mobility domain.

Abstract: A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

Abstract: Layered third-party (enhanced) application software redundancy is provided in a non-homogeneous virtual chassis including two or more switches coupled via a virtual fabric link. A virtual chassis management module within at least one of the switches discovers the other switches within the virtual chassis, determines a base master switch from all of the switches in the virtual chassis, detects an enhanced application installed on at least one enhanced switch and determines an enhanced master switch from the enhanced switches.

Abstract: An auto fabric configuration (AFC) mode is provided to enable network elements, when added to a data communication network, to discover each other, using TLVs added to standard protocols. The AFC mode further allows for automatic configuration of the network fabric. For example, core features, such as link aggregation, Virtual Local Area Networks (VLANs) and Shortest Path Bridging (SPB) adjacencies, can be automatically configured.

Abstract: Layered third-party (enhanced) application software redundancy is provided in a non-homogeneous virtual chassis including two or more switches coupled via a virtual fabric link. A virtual chassis management module within at least one of the switches discovers the other switches within the virtual chassis, determines a base master switch from all of the switches in the virtual chassis, detects an enhanced application installed on at least one enhanced switch and determines an enhanced master switch from the enhanced switches.

Abstract: A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

Abstract: Aggregation Switches connected to an edge node by a multi-chassis link aggregation group, wherein the Aggregation Switches are connected by a virtual fabric link that provides a connection for exchange of information between the Aggregation Switches regarding MAC addressing to synchronize MAC address tables.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and able to communicate via an inter-process communication (IPC) using an IPC Virtual Local Area Network (IPC VLAN). A sub-set of Customer-facing ports (CFPs) of each Aggregation Switch are coupled to the VFL and assigned to the IPC VLAN to enable communication therebetween.

Abstract: A pair of aggregation switches is connected to an edge node by a multi-chassis link aggregation group, wherein the aggregation switches are connected by a virtual fabric link (VFL) for exchange of information between the Aggregation Switches. The VFL includes a plurality of subsets of VFL physical links, wherein each subset is connected to a different pair of network interface modules on the Aggregation Switches. Traffic distribution across the plurality of subsets of VFL physical links is based on destination hardware device information in a pre-pended header of packets and/or based on a load balancing identifier in the pre-pended header.

Abstract: A network interfaced unit includes a first data processing device, a second data processing device coupled to the first data processing device, memory coupled to the first data processing device, and instructions accessible from the memory by the first data processing device. The instructions are configured for causing the first data processing device to carry out operations for causing a copy of a frame received by the second data processing device to be received by the first data processing device in response to a destination address of the frame failing to be found in an address lookup table accessibly by the second data processing device and for causing the first data processing device to query other network interface units after receiving the copy of the frame for determining if the destination address of the frame has been learned on any one of the other network interface units.

Abstract: A pair of aggregation switches is connected to an edge node by a multi-chassis link aggregation group, wherein the aggregation switches are connected by a virtual fabric link (VFL) for exchange of information between the Aggregation Switches. The VFL includes a plurality of subsets of VFL physical links, wherein each subset is connected to a different pair of network interface modules on the Aggregation Switches. Traffic distribution across the plurality of subsets of VFL physical links is based on destination hardware device information in a pre-pended header of packets and/or based on a load balancing identifier in the pre-pended header.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and able to communicate via an inter-process communication (IPC) using an IPC Virtual Local Area Network (IPC VLAN). A sub-set of Customer-facing ports (CFPs) of each Aggregation Switch are coupled to the VFL and assigned to the IPC VLAN to enable communication therebetween.

Abstract: Aggregation Switches connected to an edge node by a multi-chassis link aggregation group, wherein the Aggregation Switches are connected by a virtual fabric link that provides a connection for exchange of information between the Aggregation Switches regarding MAC addressing to synchronize MAC address tables.

Abstract: A method and apparatus for link aggregation in a data communications network. A dual-layer link aggregation is formed, including two peer nodes, each connected to at least a third node. The dual-layer link aggregation is formed of a peer link aggregation of ports for communicating with a peer node, distant link aggregation of ports for communicating with a third node, and an outer-layer link aggregation of the ports included in the peer link aggregation and the distant link aggregation. The third node may implement an inter-node link aggregation aggregating links to each of the peer nodes. Packets may be received and forwarded by the peer nodes in such a manner as to each link aggregation to be active simultaneously.

Abstract: A network interfaced unit includes a first data processing device, a second data processing device coupled to the first data processing device, memory coupled to the first data processing device, and instructions accessible from the memory by the first data processing device. The instructions are configured for causing the first data processing device to carry out operations for causing a copy of a frame received by the second data processing device to be received by the first data processing device in response to a destination address of the frame failing to be found in an address lookup table accessibly by the second data processing device and for causing the first data processing device to query other network interface units after receiving the copy of the frame for determining if the destination address of the frame has been learned on any one of the other network interface units.

Abstract: A method and apparatus for link aggregation in a data communications network. A dual-layer link aggregation is formed, including two peer nodes, each connected to at least a third node. The dual-layer link aggregation is formed of a peer link aggregation of ports for communicating with a peer node, distant link aggregation of ports for communicating with a third node, and an outer-layer link aggregation of the ports included in the peer link aggregation and the distant link aggregation. The third node may implement an inter-node link aggregation aggregating links to each of the peer nodes. Packets may be received and forwarded by the peer nodes in such a manner as to each link aggregation to be active simultaneously.