Abstract: A SDN controller may receive a packet from a terminal device and may update an IP/MAC address mapping record and a terminal access location record of the terminal device. The SDN controller may periodically send an ARP request packet and may keep the IP/MAC address mapping record and the terminal access location record of the terminal device alive. The SDN controller may also periodically age the IP/MAC address mapping record and the terminal access location record of the terminal device.

Abstract: A method and a network device for preventing service disruption during a restart of a line card. The line card including a CPU control system and a forwarding system. Information on the CPU control system is stored in a predetermined storage and a flag is set prior to the restart of the line card. The stored information includes configuration information of the forwarding system and protocol state information of the CPU control system. The CPU control system is restarted while the forwarding system is maintained in a state of providing forwarding service. Upon detecting the flag is set during the restart of the CPU control system, the stored information is restored on the CPU control system.

Abstract: A method and device for preventing a roaming user terminal from re-authentication are provided. The method includes: when Virtual Local Area Network (VLAN) of a roaming user terminal changes, change information of the roaming user terminal is reported to a Broadband Remote Access Server (BRAS) via an Access Controller (AC) and the BRAS reports modified information of the roaming user terminal to an Authentication, Authorization, Accounting server (AAA server).

Abstract: According to an example, a reauthentication or reassociation message carrying a roaming group information may be received from a wireless client (STA) by an AC when the STA is roaming. In addition, the AC may determine, according to the roaming group information and the received reauthentication or reassociation message, whether the STA is roaming between roaming groups or within a roaming group. In response to a determination that the roaming is between roaming groups, an extension authentication protocol (EAP) reauthentication process may be initiated and in response to a determination that the roaming is within a roaming group, a Key Cache method may be adopted to authenticate the STA.

Abstract: An example of the present disclosure includes a Group Member (GM) registering on a Key Server (KS) in a Group Encrypted Transport Virtual Private Network (GET VPN). The KS is to manage at least one group, and GMs belonging to the same group have the same group ID. The KS receives a group ID and a Security Association, SA, policy list supported by a GM sent by the GM. The KS, according to the group ID, determines a KS SA policy list corresponding to the group, and matches the SA policy list supported by the GM with the KS SA policy list according to a priority. A group SA policy with the highest priority is sent the GM.

Abstract: Methods and network devices are provided for forwarding a message in a layer 2 edge network that includes an access server device connected to sender and gateway devices. Forwarding information including destination IP address, destination MAC address, destination VLAN ID and destination device ID is established. A message is received by the access server device from the sender device. The message includes first destination MAC address, first destination IP address, first destination VLAN ID, and first destination device ID. When the first destination MAC address of a received message is a MAC address of the gateway device, the received message is forwarded according to the first destination MAC address, first destination VLAN ID and first destination device ID. Otherwise the message is modified and forwarded according to second destination MAC address, second destination VLAN ID, and second destination device ID determined to be associated with the first destination IP address.

Abstract: A device for stabilizing fuel in a fuel tank comprises activated carbon. The activated carbon is configured to be inserted into or installed inside a fuel tank, so that it is in contact with the fuel. The device allows the activated carbon to be in contact with the fuel, but does not allow it to be dispersed in the fuel. A method for stabilizing fuel in a fuel tank comprises adding the device to the fuel tank so that it is in contact with the fuel.

Abstract: In a portal authentication method, a DHCP request message sent by a terminal is received by an AC. In response to finding that a user of the terminal is an unauthenticated user, a private network IP address is assigned to the terminal. After portal authentication of the terminal is finished, a wireless connection of the terminal is terminated by the AC. When a DHCP request message sent by the terminal again is received, a determination that the user of the terminal passes the authentication is made by the AC, a public network IP address is assigned to the terminal, and an accounting request message is sent to a RADIUS server. After finding that the terminal is offline, an accounting stop message is sent by the AC to the RADIUS server, the wireless connection of the terminal is disconnected, and the public network IP address is released.

Abstract: A method and device of link aggregation in computer networking, wherein data originally scheduled for forwarding by a scheduled data port are diverted for forwarding by a backup data port assigned to the scheduled data port upon detection that the scheduled data port is connected to a data link which is not capable of data traffic even though the data port is still a selected port.

Abstract: A method and system for managing protocol connection in a PBB network and a BEB node. A first BEB node in the PBB network receives a Pseudo Wire (PW) connection requesting message sent by a second BEB node which has a PBB instance. When it is determined according to the PW connection requesting message that the first BEB node has the same PBB instance as that of the second BEB node, the first BEB node sends a PW response message back to the second BEB node and establishes protocol connection between the first BEB node and the second BEB node for forwarding backbone frame.

Abstract: The present invention discloses a method of dual stack access, wherein a network device authenticates the first protocol address of a requesting client, stores the user name, first protocol address, and address status information of the client in the user information table if the authentication succeeds, assigns a second protocol address to the client, stores this second protocol address and address status information in the user information table, generates control rules for the client according to its user information, and controls dual stack access of the client according to the rules. This invention provides effective authentication-based access control of dual stack users.

Abstract: According to an example, a routing generation method and apparatus is applied in Fiber Channel over Ethernet (FCoE). Based on the additions to the TLV, which may be carried in the Hello packet and the LSP packet, the Hello packet of the ISIS protocol may be used to implement neighbor discovery of the FC protocol, and the LSP synchronization of the ISIS protocol may be used to implement the link information synchronization of the FC protocol. Thus, the FC routing may be generated without the FSPF. Therefore, FCoE may be implemented with a lower cost.

Abstract: A method and device for processing source role information in which a source role tag is inserted into a packet as an inner VLAN tag of the packet and used to perform role based access control processing for the packet.

Abstract: The present invention discloses a method for communication among different components, including integrating a Network Forwarding Component (NFC) for forwarding messages and at least one Independent Application Component (IAC) for performing other service processing into one network device; setting at least one cooperation mode in the NFC and each of the at least one IAC; and communicating with each other, by the NFC and the at least one IAC, according to the at least one cooperation mode. The cooperation mode may be any or any combination of a host mode, a mirror mode, a redirection mode and a pass-through mode. According to the present invention, the NFC and the IAC may communicate according to the cooperation mode so as to ensure that the NFC and the IAC can cooperate to provide various service capabilities including message forwarding and other additional service capabilities.

Abstract: According to an example, a method for avoiding a loop in a network, which is performed by each ED in each VPN site, comprises: interacting with other EDs in a same VPN site to elect a DED; assigning an authorized forwarding instance to each ED in the same VPN site when the ED is elected as the DED; obtaining the authorized forwarding instance from the DED when the ED is not elected as the DED; allowing traffic of the authorized forwarding instance transmitted from or to a public network, and blocking traffic of unauthorized forwarding instance transmitted from or to the public network.

Abstract: According to an example, when a member device is in a Master state in a VRRP backup group, after snooping a first DHCP packet sent from a DHCP client to a DHCP server, the member device determines an interface receiving the first DHCP packet as an interface of the DHCP client; after snooping a second DHCP packet sent from the DHCP server to a DHCP client, the member device obtains a default gateway address and a subnet mask of the DHCP client from the second DHCP packet; after obtaining the default gateway address and the subnet mask, if the interface of the DHCP client is not configured with a virtual IP address and a network segment route, the member device respectively configures the default gateway address and the subnet mask as the virtual IP address and the network segment route on the interface of the DHCP client.

Abstract: In a method for 802.1X authentication, used in a network which comprises an access device and an access control device, a WLAN security template and a 802.1X client template is enabled at the access device, a 802.1X client template is enabled at the access device, and a 802.1X device template is enabled at a tunnel port of the access control device. The access control device establishes a 802.1X authentication tunnel with the access device, receive a packet transmitted by a client at the access control device through the 802.1X authentication tunnel, authenticates the client after receiving the packet, and assists the access device through the 802.1X authentication tunnel to obtain a session key.

Abstract: A method for routing switch is disclosed. The method comprises: when a network device forwards traffic through N equal-cost multi-path (ECMP) routes to a destination, if M of these routes are inactive, then for each inactive route, determining an alternative route for replacing the inactive route from N-M active routes, and modifying the inactive route to the alternative route so as to switch the traffic of the inactive route onto the alternative route, wherein N and M are positive integer numbers, with N being greater than or equal to 2 and M being greater than or equal to 1 and smaller than N.

Abstract: The present disclosure describes traffic forwarding in a network where Virtual Local Area Networks (VLANs) are deployed over geographically dispersed sites. The network comprises a first edge device (ED) at a first site and a second ED at a second site. In one example, the first ED receives traffic from a host device within the first site. The received traffic is to be forwarded to the second ED via a virtual link established between the first ED and second ED. The first ED determines whether a bandwidth required by the received traffic exceeds a bandwidth threshold negotiated between the first ED and second ED for the first ED to forward traffic to the second ED via the virtual link. If the negotiated bandwidth threshold is not exceeded, the received traffic is forwarded to the second ED via the virtual link. Otherwise, traffic with high priority is selected from the received traffic and forwarded to the second ED via the virtual link.

Abstract: A network management apparatus according to an example may configure virtual Media Access Control (MAC) addresses for virtual machines (VMs). A virtual MAC addresses may include a Uniqueness identifier (ID), a DC ID, a Device ID and a Host ID. A number of bytes of the virtual MAC address may be equal to a number of bytes of an actual MAC address of the VM. VMs accessing the same access layer device in the same data center may have the same Uniqueness ID, DC ID, and Device ID and have different Host IDs. VMs accessing different access layer devices and in the same data center may have the same Uniqueness ID and DC ID and have different Device IDs.