Abstract: Disclosed herein are system, method, and computer program product aspects for multiple instance Intermediate System to Intermediate System (IS-IS or ISIS) for a multi-area fabric. A network area in a multi-area fabric includes one or more network nodes and a boundary node shared with an other network area of the multi-area fabric outside of the network area. The boundary node can include a first ISIS instance associated with the network area and a second ISIS instance associated with the other network area. The second ISIS instance can be configured to pass information associated with the other network area to the first ISIS instance.

Abstract: Provided herein are systems and methods for providing a MAC-based redistribution policy between networks in a multi-area network. A network can have a boundary node that communicates to neighboring networks. Boundary nodes can receive policy updates that identify which services are redistributable across network boundaries. Boundary nodes can receive a packet for a service, translate the packet's encapsulation, and forward the packet across the boundary towards a destination node. Boundary nodes can forward the packet such that it originates in the second network from a virtual node.

Abstract: Disclosed herein are system, method, and computer program product aspects for multiple instance Intermediate System to Intermediate System (IS-IS or ISIS) for a multi-area fabric. A network area in a multi-area fabric includes one or more network nodes and a boundary node shared with an other network area of the multi-area fabric outside of the network area. The boundary node can include a first ISIS instance associated with the network area and a second ISIS instance associated with the other network area. The second ISIS instance can be configured to pass information associated with the other network area to the first ISIS instance.

Abstract: Disclosed herein are system, method, and computer program product aspects for generating and/or using virtual node(s) (e.g., virtual SPB node(s)) in a multi-area fabric (e.g., a multi-area SPB fabric). A multi-area network includes a first network area including a first set of network nodes. The multi-area network further includes a second network area including a second set of network nodes, where the second set of network nodes is outside of the first network area. The multi-area network further includes a virtual node including a logical Intermediate System to Intermediate System (ISIS) node representing at least one of the first set of network nodes and the second set of network nodes.

Abstract: Provided herein are systems and methods for managing redistribution and remapping of multicast services between networks in a multi-area network. Multicast streams can be sent through networks from a source node towards a boundary node. The boundary node can receive the multicast stream, remap a source node identifier and service instance identifier, and forward the multicast stream into a second network. The boundary node can receive a route for the multicast stream. The route can be installed in a link-state database and can be used to send the multicast stream through the multi-area network from the source node to a destination node.

Abstract: Disclosed herein are system, method, and computer program product aspects for multiple instance Intermediate System to Intermediate System (IS-IS or ISIS) for a multi-area fabric. A network area in a multi-area fabric includes one or more network nodes and a boundary node shared with an other network area of the multi-area fabric outside of the network area. The boundary node can include a first ISIS instance associated with the network area and a second ISIS instance associated with the other network area. The second ISIS instance can be configured to pass information associated with the other network area to the first ISIS instance.

Abstract: Disclosed herein are system, method, and computer program product aspects for multiple instance Intermediate System to Intermediate System (IS-IS or ISIS) for a multi-area fabric. A network area in a multi-area fabric includes one or more network nodes and a boundary node shared with an other network area of the multi-area fabric outside of the network area. The boundary node can include a first ISIS instance associated with the network area and a second ISIS instance associated with the other network area. The second ISIS instance can be configured to pass information associated with the other network area to the first ISIS instance.

Abstract: The present disclosure is directed to systems and methods for generating an enterprise architecture for an enterprise network. As one example, a method may include: receiving historical information from a plurality of enterprise networks, the historical information comprising information about an enterprise architecture of each of the enterprise networks; analyzing the historical information from the plurality of enterprise networks to generate a network health score for each of the plurality of enterprise networks; training a machine learning model using a plurality of machine learning algorithms based on the historical information and the network health score of each the plurality of enterprise networks; and generating, using the machine learning model, an enterprise architecture for a first enterprise network, the first enterprise network being a new enterprise network or an existing enterprise network from among the plurality of enterprise networks.

Abstract: A multicast frame directed to a plurality of devices coupled to a network can be received, where the plurality of devices comprising at least one intended recipient device and at least one unintended recipient device. A destination unicast address corresponding to an intended recipient device can be identified. The multicast frame can be converted into a unicast frame directed to the intended recipient device, the unicast frame configured with the destination unicast address. The unicast frame can be blocked from accessing the unintended recipient device. The unicast frame can be provided to the intended recipient device.

Abstract: Disclosed herein are system, method, and computer program product embodiments for analyzing a network. An embodiment operates by a third-party component deriving network data based on a received data packet from a network component configured to perform a network function. The third-party component orders a transaction including second network data from a distributed ledger. The third-party component determines that the first and second network data meet or exceed a condition of a smart contract comprising the condition and an associated network action related to the network function. The third-party component sends the condition of the smart contract and the first and second network data to another third-party component. The third-party component receives a validation that the first and second network data meet or exceed the first condition of the first smart contract and performing the first network action on the network.

Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: Implementations relate to configuration of networks using switch device access of a remote server. In some implementations, a method includes sending a request from an edge configuration device to an access control server, where the request requests shortest path bridging (SPB) configuration information for a detected end device connected to the edge configuration device, and where the edge configuration device is connected to an SPB network. The method receives at the edge configuration device the SPB configuration information for the end device from the access control server. The edge configuration device is configured to provide the end device access to the SPB network.

Abstract: Systems and methods are disclosed herein for monitoring health of each switch of a plurality of switches on a network by selectively mirroring packets transmitted by each switch of the plurality of switches. In some embodiments, control circuitry generates a plurality of mirroring parameters, each mirroring parameter comprising an instruction to mirror a respective type of packet. The control circuitry transmits the plurality of mirroring parameters to each switch of the plurality of switches on the network, and receives, from a switch, a packet that was mirrored by the switch according to a mirroring parameter of the plurality of mirroring parameters. The control circuitry determines the respective type of the packet, executes an analysis of contents of the packet based on the respective type of the packet, and determines a health of the switch based on results of the analysis.

Abstract: A system and method for providing a dynamic comparative network health analysis of a network environment, the method comprising: obtaining dynamic and static network environment parameters of a plurality of network environments; creating network environment profiles of each network environment of the plurality of network environments based on the dynamic and static network environment parameters; performing comparative analysis of network environment profiles of a first network environment of the plurality of network environments with network environment profiles of a second network environment of the plurality of network environments to generate a comparative analysis; based on the comparative analysis, determining whether to reconfigure the first network environment or create a new network environment; if it is determined to reconfigure the first network environment, generating a remedial plan for the first network environment; if it is determined to create a new network environment, generating a new plan f

Abstract: A mounting device configured to be integrated with a network device to facilitate mounting of the network device is disclosed. In an embodiment, the mounting device is a twist-to-lock mounting device configured to be compatible with one or more standard types of ceiling rails, allowing network devices to be mounted in a non-destructive manner without requiring the use of tools.

Abstract: Minimum guaranteed wireless network bandwidth is provided to client network devices by monitoring the performance of network connections to identify client network devices experiencing network congestion. Congested network connections are then analyzed to determine the source of the network congestion. Depending upon the source of the network congestion, an embodiment of the invention may undertake steps to either improve the quality of the network connection or to mitigate the impact of this network connection on other network connections. High quality network connections may be allocated additional bandwidth, airtime, or other resources to reduce the network congestion. Low quality network connections are not allocated additional bandwidth, airtime, or other resources. Instead, the impact of this network connection on the other network connections is mitigated.

Abstract: Systems, methods, and apparatuses are provided herein for implementing a PoE system comprising a plurality of power sourcing equipment that power a single powered device. Control circuitry may determine the power necessary to operate a powered device in a first power mode, and may cause the powered device to draw, from a first power sourcing device, to a first port of the powered device, a first wattage. The powered device may draw, from a second power sourcing device, to a second port of a powered device, a second wattage, where a sum of the first and second wattage equals the amount of power necessary to operate in the first power mode, wherein a first isolation boundary isolates the first power sourcing equipment, the first Ethernet link, and the first port, and wherein a second isolation boundary isolates the second power sourcing equipment, the second Ethernet link, and the second port.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing an anomaly detection system. Some aspects of this disclosure include a method for detecting anomaly in a network device. The method includes determining one or more similarity values between a flow vector corresponding to a flow associated with the network device and one or more flow clusters associated with the network device. The method further includes determining a maximum similarity value as a maximum of the one or more similarity values and comparing the maximum similarity value to a threshold. The method also includes, in response to the maximum similarity value being equal to or greater than the threshold, updating a flow cluster associated with the maximum similarity value. The method also includes, in response to the maximum similarity measure being less than the threshold, detecting the anomaly in the network device.

Abstract: A hybrid low power network device comprising: a wave 1 radio configured to provide client devices wireless access to a network using SU-MIMO, a wave 2 radio configured to provide the client devices wireless access to the network using MU-MIMO, a radio management system configured to assign client devices to either the wave 1 radio or the wave 2 radio for communicating over wireless communication channels in accessing the network, first and second Ethernet ports, wherein at least one of the first and second Ethernet ports are configured to provide power to the hybrid low power network device and allow at least one of the wave 1 radio and the wave 2 radio to communicate with the network, in operation the hybrid low power network device is configured to operate at a power consumption level between 15 and 17 W in providing the client devices wireless access to the network.

Abstract: Techniques for synchronizing a network device to selectively operate according to a selectable operation policy. A system utilizing such techniques can a self-configuring network device operation coordination system and a self-configuring network device operation management system. A method utilizing such techniques can include synchronizing a network device to selectively operate according to a first operation policy and a second operation policy in providing network service access.