Abstract: A network element having a Non-Access Stratum (NAS) Node Selection Function for discriminating information in order to determine which core network node a signaling message should be sent comprising: a network interface unit configured to interact with a packet network system; a processor with a memory associated with the network interface unit and adapted to: receive the signaling message from an eNB at a selection function; extract header information from Stream Control Transport Protocol (SCTP) of the signaling message; communicate with a database having a persistent application map to determine if there is an association between the header information and a core network entity; if there is an association, forward the signaling message to a selected core network entity; and determine at the selected core network entity which one of a plurality of core network nodes within a core network pool to route the message based on availability of the plurality of core network nodes.

Abstract: Techniques for reducing the latency in performing a failover from a protected connection to its backup connection when a network event is detected affecting the protected connection. In an MPLS network, techniques are provided for failing a protected LSP to a backup LSP in a fast and efficient manner. In one embodiment, the faster failover is facilitated by storing protected LSPs and their backup LSPs information in the data plane, such as locally on a linecard.

Abstract: The WAN optimization devices delay ACK until the ACK is actually received from the target while opening up the TCP window. When the ACK is received and forwarded, the TCP window is reduced in size. If there are mirrored WAN optimization devices, the original WAN optimization device sends the datagram across the WAN and at the same time sends the datagram to the mirroring WAN optimization device. When the mirroring WAN optimization device ACKs the mirrored datagram, the original WAN optimization device ACKs the host. When the ACK across the WAN is received, the mirroring WAN optimization device gets the ACK forwarded and deletes the mirrored datagram. On a loss of a device, the TCP connection transitions to the mirroring WAN optimization device, which closes the LAN TCP window and transmits all un-ACKed data. Then upon success the mirroring WAN optimization device reopens the LAN TCP window.

Abstract: A protocol identifies and configures rings in a network topology automatically in order to simplify and quicken the actions that need to be performed in response to addition, deletion and shuffle of network nodes in that topology. Such rings do not need to be identified and configured manually. The protocol involves two separate sequentially performed phases. In the first phase, the protocol can automatically identify all rings that are present within a Virtual Local Area Network (VLAN) topology. In the second phase, the protocol can automatically configure each node of each such ring in conformity with the Ethernet Ring Protection (ERP) protocol. After this ERP configuration has been performed, the failure of a link within the network will not require every network node to re-learn paths through the network; instead, the nodes that are required to re-learn such paths can be limited to those within the particular ring that contained the failed link.

Abstract: Techniques are provided to enable a network device, such as a switch, to perform global server load balancing (GSLB) while operating as a proxy to a domain name system security extensions (DNSSEC)-capable authoritative DNS server. The network device preserves an original signature generated by the DNSSEC-capable authoritative DNS server for a resource record set contained in a DNSSEC reply.

Abstract: A protocol identifies and configures rings in a network topology automatically in order to simplify and quicken the actions that need to be performed in response to addition, deletion and shuffle of network nodes in that topology. Such rings do not need to be identified and configured manually. The protocol involves two separate sequentially performed phases. In the first phase, the protocol can automatically identify all rings that are present within a Virtual Local Area Network (VLAN) topology. In the second phase, the protocol can automatically configure each node of each such ring in conformity with the Ethernet Ring Protection (ERP) protocol. After this ERP configuration has been performed, the failure of a link within the network will not require every network node to re-learn paths through the network; instead, the nodes that are required to re-learn such paths can be limited to those within the particular ring that contained the failed link.

Abstract: A key identifier for an encryption key repository is stored with customer data on a logical device. When the customer data is compressible, the key identifier is stored in space freed by compressing the customer data. When the customer data is not compressible, a portion of the customer data is copied to a key record in the key repository identified by the key identifier, and the key identifier overwrites the copied customer data.

Abstract: An embodiment of a method includes generating a command configured to cause activation of local beaconing at a selected device, and transmitting the command to the selected device. An embodiment of a system includes a processor, a memory including instructions executable by the processor, wherein the instructions cause the processor to generate a command configured to cause a selected device to activate local beaconing, a port connected to the selected device, and a transmitter operable to transmit the command to the selected device via the port.

Abstract: Techniques for validating configuration changes in a mixed node topology are provided. In one embodiment, a device can identify a link to be removed from a topology comprising a plurality of nodes, where the plurality of nodes includes one or more nodes of a first type and one or more nodes of a second type. The device can then determine whether the removal of the link from the topology would require data traffic between two nodes of the first type to pass through a node of the second type.

Abstract: A mechanism for identifying long-lived large flows in a communication network is disclosed in which packets transmitted through ports of a switching device or router are continuously examined. As new flows are recognized, their flow definition information is processed through a hashing table that uses a predetermined number of hash stages each having a pre-selected number of hash buckets. Each hash bucket has a counter that is incremented each time flow definition information ends up in the bucket. At the same time as counters are incremented, they are compared against a threshold number. If the bucket counters for all the hash stages exceed this threshold number, the flow is identified as a long-lived large flow and stored as such in a flow table.

Abstract: A method of configuring a stack includes: connecting stacking ports of a plurality of stackable devices using one or more stacking links; connecting a user console to a first one of the stackable devices; transmitting a stack setup command from the user console to the first stackable device; and establishing a stack in response to the stack setup command. The stack is established by initiating a discovery process with the first stackable device in response to the stack setup command, wherein the first stackable device requests and receives identifying information from the stackable devices over the stacking links during the discovery process. The topology of the stackable devices is displayed with the user console in response to the identifying information. The stackable devices are authenticated during the discovery process such that the stack setup is secure. The first stackable device becomes the active controller of the stack by default.

Abstract: A blade for a chassis-based system includes a printed circuit board (PCB) mounted at a tilt angle within the blade. The tilt angle provides space above or below the PCB at the front end of the blade, such that media interface modules can be flexibly positioned within the blade. A tilt angle that positions the PCB higher near the front end of the blade may enable media interface modules mounted in a belly-to-belly configuration on the PCB to be fitted within the front end of the blade. A tilt angle that positions the PCB lower near the front end of the blade may enable media interface modules mounted on the upper surface of the PCB to be fitted within the first end of the blade. The tilt angle also positions a backplane connector mounted on the PCB to properly engage a backplane when the blade is inserted into a slot.

Abstract: A stackable device having a plurality of data ports, wherein each of the data ports is capable of operating as a regular data port or a stacking port. A first set of one or more of the data ports is specified as a first flexible stacking port, and a second set of one or more of the data ports is specified as a second flexible stacking port. Each flexible stacking port can be individually configured to operate as an actual stacking port, if required by the configuration of an associated stack. If a flexible stacking port is not configured to operate as an actual stacking port, then the data port(s) included in the flexible stacking port are available to operate as regular data port(s).

Abstract: Method and apparatus provide for cooling a system. For example, a network communication system may include a central processing unit (CPU) and a fan controller. A chassis includes a plurality of receiving portions, each portion configured to receive a field replaceable unit (FRU). The chassis may also include a fan and a temperature sensor. The system CPU is configured to load a plurality of environmental profiles into fan controller memory, each profile indicating a fan speed for the fan based on a temperature reading from the temperature sensor. The fan controller is to determine a first configuration of the network communication device as to which FRUs are installed in the chassis and to select an environmental profile from the fan controller memory to use based on the determined first configuration.

Abstract: A stackable device having a plurality of data ports, wherein each of the data ports is capable of operating as a regular data port or a stacking port. A first set of one or more of the data ports is specified as a first flexible stacking port, and a second set of one or more of the data ports is specified as a second flexible stacking port. Each flexible stacking port can be individually configured to operate as an actual stacking port, if required by the configuration of an associated stack. If a flexible stacking port is not configured to operate as an actual stacking port, then the data port(s) included in the flexible stacking port are available to operate as regular data port(s).

Abstract: An exact match lookup system includes a hash function that generates a hash value in response to an input hash key. The hash value is used to retrieve a hash bucket index value from a hash bucket index table. The hash bucket index value is used to retrieve a plurality of hash keys from a plurality of hash bucket tables, in parallel. The retrieved hash keys are compared with the input hash key to identify a match. Hit logic generates an output index by concatenating the hash bucket index value with an address associated with the hash bucket table that provides the matching hash key. An exact match result is provided in response to the output index. A content addressable memory (CAM) may store hash keys that do not fit in the hash bucket tables.

Abstract: Techniques for providing core-based virtualization based upon cores provided by one or more processors of a system. A device such as a network device comprising multiple processor cores provides for core-based virtualization. According to one embodiment, a network device is provided comprising a first subsystem for processing packets received by the network device. The first subsystem may comprise a set of one or more processors, the one or more processors providing a plurality of cores. Each core in the plurality of cores may have associated memory resources.

Abstract: Techniques that enable a network device such as a router to provide multicast routing services without interruption, even in the event of a switchover. An incremental updates technique is used to synchronize multicast information maintained by a first processor and multicast information maintained by a second processor. The first processor may be a management processor operating in active mode in a network device and the second processor may be a management processor operating in standby mode in the network device. The second processor may also be a processor on a linecard of the network device.

Abstract: A system and method for sharing a WAN TCP tunnel between multiple flows without having head of the line blocking problem is disclosed. When a complete but out of order PDU is stuck behind an incomplete PDU in a TCP tunnel, the complete but out of order PDU is removed from the tunnel. To do that, first the boundaries of the PDUs of the different flows are preserved and the TCP receive window advertisement is increased. The receive window is opened when initially receiving out-of-order data. As out-of-order complete PDUs are pulled out of the receive queue, to address double counting, place holders are used in the receive queue to indicate data that was in the queue. As out-of-order data PDUs are pulled out of the queue the window advertisement is increased. This keeps the sending side from running out of TX window and stopping transmission of new data.

Abstract: Embodiments described herein discuss an approach to implementing load-balancing across multiple monitoring servers. One such embodiment describes a network monitoring device. The network monitoring device includes an ingress port, for receiving mirrored network packets, and a number of egress ports. The egress ports are associated with a number of monitoring servers, and used to forward the mirrored network packets to the monitoring servers. A packet classifier, coupled to the ingress port, examines the mirrored network packets, and determines which of the monitoring servers should receive the packets.