Abstract: A wireless node in a wireless communication network. The wireless node includes one or more interfaces configured to receive wireless transmissions, a memory comprising instructions, and a hardware processor. The wireless node samples a received wireless transmission into a plurality of time-based subdivisions for each subdivision of the wireless transmission the wireless node determines a cross-correlation between the subdivision and a local syncword. The local syncword is constructed to correlate to any primary synchronization signal, PSS, of a plurality of PSSs defined for synchronization in the wireless network. The wireless node, based on the cross-correlation, determines whether one PSS of the plurality of PSSs is present in the subdivision of the wireless transmission.

Abstract: This disclosure describes techniques for validating a replication network. Validation of a replication network may include checking connectivity among components of the replication network, such as paired clusters. The techniques include performing intra-cluster and inter-cluster replication validation checks. The replication validation checks may generate replication validation output. Based at least in part of the replication validation output, user interface data may be sent to a display device for presentation to a user. In this way, connectivity faults within the replication network may be resolved.

Abstract: Techniques for improving convergence of Protocol Independent Multicast assert state information in multicast groups include forwarding, by a router, a PIM join message originating from a destination host and stores distribution tree information based on the join message. The method further includes participating, by the router, in a Protocol Independent Multicast (“PIM”) assert election among a plurality of routers and storing, by the router, PIM assert state information based on an outcome of the PIM assert election. The method further includes acquiring, by the router, routing information base (“RIB”) convergence. The method further includes triggering by the router, or causing, by the router, another router to trigger, a PIM assert among the plurality of routers. The method further includes re-converging, by the router, with PIM assert states among the plurality of routers and storing, by the router, converged PIM assert state information.

Abstract: Methods to secure against IP address thefts by rogue devices in a virtualized datacenter are provided. Rogue devices are detected and distinguished from a migration of an endpoint in a virtualized datacenter. A first hop network element in a one or more network fabrics intercepts a request that includes an identity of an endpoint and performs a local lookup for the endpoint entity identifier. Based on the lookup not finding the endpoint entity identifier, the first hop network element broadcasts a message such as a remote media access address (MAC) query to other network elements in the one or more network fabrics. Based on the received response, which may include an IP address associated with the MAC address, the first hop network element performs a theft validation process to determine whether the request originated from a migrated endpoint or a rogue device.

Abstract: Various implementations disclosed herein enable malleable routing for data packets. For example, in various implementations, a method of routing a type of data packets is performed by a device. In some implementations, the device includes a non-transitory memory and one or more processors coupled with the non-transitory memory. In some implementations, the method includes determining a routing criterion to transmit a set of data packets across a network. In some implementations, the method includes identifying network nodes and communication links in the network that satisfy the routing criterion. In some implementations, the method includes determining a route for the set of data packets through the network nodes and the communication links that satisfy the routing criterion. In some implementations, the method includes configuring the network nodes that are on the route with configuration information that allows the set of data packets to propagate along the route.

Abstract: Various implementations disclosed herein enable malleable routing for data packets. For example, in various implementations, a method of routing a type of data packets is performed by a device. In some implementations, the device includes a non-transitory memory and one or more processors coupled with the non-transitory memory. In some implementations, the method includes determining a routing criterion to transmit a set of data packets across a network. In some implementations, the method includes identifying network nodes and communication links in the network that satisfy the routing criterion. In some implementations, the method includes determining a route for the set of data packets through the network nodes and the communication links that satisfy the routing criterion. In some implementations, the method includes configuring the network nodes that are on the route with configuration information that allows the set of data packets to propagate along the route.

Abstract: Cloud delivered access may be provided. A network device may provide a client device with a pre-authentication virtual network and a pre-authentication address. Next, a policy may be received in response to the client device authenticating. The client device may then be moved to a post-authentication virtual network based on the policy. A post-authentication address may then be obtained for the client device in response to moving the client device to a post-authentication virtual network. Traffic for the client device may then be translated to the post-authentication address.

Abstract: In one embodiment, and apparatus includes an electrical socket for connection with an electrical plug, a sensor for identifying a secure connection between the electrical socket and the electrical plug, and an electronic controller electrically coupled to the electrical socket and comprising a power input for receiving power. The electronic controller is operable to transmit power to the electrical socket upon receiving a signal from the sensor identifying the secure connection between the electrical socket and the electrical plug and shut off or turn on power to the electrical socket upon receiving an external input to the electronic controller. A method is also disclosed herein. The apparatus and method provide an electronic controlled power switch or circuit breaker safety device.

Abstract: In one or more embodiments, an apparatus generally comprises a microelectromechanical system (MEMS) module comprising a plurality of air movement cells and a power unit operable to control the plurality of air movement cells, and a housing configured for slidably receiving the MEMS module and positioning the MEMS module adjacent to a heat generating component of a network device. The MEMS module is operable to dissipate heat from the heat generating component and is configured for online installation and removal during operation of the heat generating component.

Abstract: An ingress network element obtains data from a source endpoint associated with the ingress network element. The data identifies a destination endpoint remote from the ingress network element. The ingress network element provides a map request identifying the destination endpoint to a mapping server. The ingress network element obtains a map reply including a network address of an egress network element associated with the destination endpoint and a security association. The ingress network element encrypts the data for the destination endpoint with the security association according to a cryptographic policy based on the source endpoint, the destination endpoint, and the availability of cryptographic resources on the network. The ingress network element provides the encrypted data to the egress network element.

Abstract: Embodiments for adaptive inline modulation tuning for optical interfaces is described. The inline modulation tuning is provided by optical nodes, where the optical nodes exchange optical modulation information and node ability information between optical devices in a node pair. An optimal modulation scheme for the node pair is selected based on modulation abilities of each node and associated transceiver, as well as a link quality and performance observed for the optical link.

Abstract: A network device, including ports that receive/send data packets from/to a network, receives data packets of multiple traffic flows, and populates a queue in memory with the data packets. The network device periodically updates a fair rate for the multiple traffic flows to converge a length of the queue to a reference length. Specifically, the network device determines a length of the queue, a change in the length from a previous length, and a deviation of the length from the reference length. The network device detects an increase in the change in length above a threshold that is based on the reference length. If the increase is not above the threshold, the network device derives the fair rate from a previous fair rate using proportional integral control. The network device identifies elephant flows among the multiple traffic flows, and sends the fair rate to a source of each elephant flow.

Abstract: Aspects described herein include a mode multiplexer comprising a first optical waveguide extending between a first port and a second port. A first input mode of an optical signal entering the first port is propagated through the first optical waveguide to the second port. The mode multiplexer further comprises a second optical waveguide configured to evanescently couple with a coupling section of the first optical waveguide. A second input mode of the optical signal entering the first port is propagated through the second optical waveguide to a third port. The first optical waveguide further defines a filtering section between the coupling section and the second port, the filtering section configured to filter the second input mode.

Abstract: In one embodiment, a method includes receiving a packet comprising a destination address in a destination address field of the packet, where the destination address including at least a first global identifier and a second global identifier, determining that the first global identifier corresponds to the first network apparatus, determining that a local identifier in the destination address is associated with the first global identifier, identifying one or more instructions associated with the local identifier, performing one or more functions instructed by the one or more instructions, updating the destination address in the destination field of the packet to an updated destination address, determining a forwarding rule associated with the packet, and forwarding the packet with the updated destination address based on the forwarding rule.

Abstract: Techniques for utilizing Software-Defined Field-Area Network (SD-FAN) controllers to receive a geographic location and transmission power of individual nodes and generate a geographic location topology of a Field-Area Network (FAN) to provide nodes with location-aware route paths for data transmission. One or more SD-FAN controller(s) may maintain a geographic location database to store the geographic location and transmission power of the individual nodes. Each node may utilize a Destination Address Object to advertise its geographic location and transmission power to the SD-FAN controller. The SD-FAN controller(s) may utilize the geographic location table to generate the geographic location topology of the FAN and determine a location-aware route path for optimized data transmission between nodes in the FAN.

Abstract: Systems and methods are provided for receiving, at an enterprise network, first authentication data of a citizens broadband radio service (CBRS)-enabled device, receiving, at the enterprise network, second authentication data of the CBRS-enabled device, the first authentication data of the CBRS-enabled device being a different type of authentication data than the second authentication data of the CBRS-enabled device, determining a class of the CBRS-enabled device based on the first authentication data and the second authentication data of the CBRS-enabled device, determining a network segment for the CBRS-enabled device based on the class of the CBRS-enabled device, and providing access to the CBRS-enabled device based on the determining of the network segment for the CBRS-enabled device.

Abstract: In one embodiment, a method comprises: identifying, by a root network device of a directed acyclic graph (DAG) in a low power and lossy network, a child network device in the DAG, including identifying a first rank associated with the child network device; allocating, by the root network device, an allocated rank for the child network device, the allocated rank different from the first rank; and outputting, by the root network device, a message to the child network device specifying the allocated rank, the message causing the child network device to implement the allocated rank in the DAG, including causing the child network device to generate and output a Destination Oriented Directed Acyclic Graph (DODAG) information object (DIO) message specifying the child network device is using the allocated rank.

Abstract: The present disclosure is directed to reducing the secure boot time of software images and includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause one or more components to perform operations including identifying a software image for a first secure boot, the software image stored in a persistent storage and comprising a kickstart software package and a system software package, fetching the software image, including the kickstart software package and the system software package, from the persistent storage to a memory, verifying one or more digital signatures associated with the software image, booting the kickstart software package of the software image from the memory, and staging the system software package in the persistent storage.

Abstract: Access Point (AP) placement using Fine Time Measurement (FTM) may be provided. First, a plurality of Time-of-Flight (ToF) values between a first service end point and a second service end point may be determined. Each one of the plurality of ToF values may be derived from packets transmitted via different beamforming vector patterns at the first service end point and the second service end point. Then a minimum ToF value of the plurality of ToF values may be determined. Next, a distance between the first service end point and the second service end point may be determined based on the minimum ToF value.