Abstract: Techniques for correlating and load balancing IMS traffic in a visibility network are provided. According to one set of embodiments, a packet broker of the visibility network can receive IMS traffic replicated from an IMS core network and identify control/data packets in the IMS traffic that are part of the same IMS session based on FROM and TO user identities included in the packets. The packet broker can then generate a unique session identifier for the IMS session and add the generated session identifier to the packets. In certain embodiments, the packet broker can further provide the generated session identifier as input to a load balancing algorithm or rule set. The load balancing algorithm or rule set can output an egress port of the packet broker through which the control/data packets should be forwarded based on the session identifier.

Abstract: Embodiments disclosed herein provide redundant connectivity between an Ethernet Automatic Protection Switching (EAPS) access network and a Virtual Private LAN Service (VPLS) network. A first VPLS node is provided to function as an EAPS controller node. A second VPLS node is provided to function as an EAPS partner node. The first and second VPLS nodes are linked by a pseudowire and an EAPS shared-link. Additional EAPS nodes are also provided. The additional EAPS nodes are linked to each other and one of the additional EAPS nodes is designated as a master node. Links are also established between the VPLS nodes and the EAPS nodes such that one or more EAPS rings are formed. Each EAPS ring includes the shared-link between the first and second VPLS nodes. The EAPS rings are monitored to detect link failures.

Abstract: A method for implementing auto attach for a shortest path bridging (SPB) network comprises determining, on an access point, that an auto attach device communicating in a SPB network is enabled for auto attach, and an advertisement is transmitted to a mobile station. The access point acts a proxy between the mobile station and the auto-attach device by communicably coupling the auto attach device and the mobile station via the access point. A virtual local area network (VLAN) identification and service instance identifier (I-SID) is received from the mobile station, when is then transmitted to the auto-attach device. A VLAN (independent of any static VLAN associated with the WLAN) is created off of the VLAN identification and an indication that the I-SID and the VLAN have been accepted. Data communications are then provided between the mobile station and the auto attach device via the VLAN and the access point.

Abstract: Implementations generally relate to synchronizing peer nodes in networks. In one embodiment, a method includes generating a data sequence number. The method also includes associating the data sequence number with a data item. The method also includes sending the data item and the data sequence number to each peer node of a plurality of peer nodes. The method also includes determining if an acknowledgment has been received from each peer node, wherein each acknowledgment indicates the peer node that sent the acknowledgment and indicates the data sequence number. The method also includes resending the data item and the data sequence number to one or more peer nodes based on a predetermined policy.

Abstract: Methods, systems and computer readable media for securing mDNS in enterprise networks are described. In some implementations, the method can include authorizing one or more service advertisements and validating one or more service advertisements. The method can also include adding one or more information details to a record associated with an advertised service.

Abstract: Techniques for performing near-uniform load balancing in a visibility network based on usage prediction are provided. According to one embodiment, a packet broker of the visibility network can receive a control packet replicated from a core network, where the control packet includes a user or device identifier and a request to create a user session for a user identified by the user/device identifier. The packet broker can further determine, based on the user/device identifier and one or more other parameters, a rank value for the user session, where the rank value indicates an amount of network traffic that the user is likely to generate in the core network during the user session. The packet broker can then select an egress port for the user session based on the rank value and forward subsequent control and data traffic for the user session through the selected egress port.

Abstract: Systems and methods are presented herewith for automatically assigning a Multicast Backbone Media Access Control (“BMAC”) address to a switch (or a similar network device) newly-added to a network. Media Access Control (“MAC”) addresses (unicast addresses) that are assigned by default to the switch may be used in a process to generate a multicast BMAC address and assign the multicast BMAC address to the switch, thereby, automatically enabling communications with other network devices over the SPB network. The process involves modifying a bit of a selected unicast address to transform the address into a multicast address. The system may use the modified MAC address as the multicast BMAC address.

Abstract: Methods and systems for mitigating the impact of beamforming on the accuracy of Wi-Fi based location tracking of client devices. An embodiment takes the form of a process that includes (a) obtaining a plurality of received signal strength indicator (RSSI) values respectively associated with frames in a plurality of frames that were (i) received by various access points in a plurality of access points and (ii) transmitted by a client device that is connected to a first access point in the plurality of access points; (b) segmenting the access points in the plurality of access points into (i) a beamforming-path set of one or more access points and (ii) a non-beamforming-path set of one or more access points; (c) identifying a location-determination subset of the obtained RSSI values; and (d) determining a location of the client device using the identified location-determination subset of the obtained RSSI values.

Abstract: Access point cloud controller auto-discovery is provided. An access point, in communication with other access points, receives data indicative of whether each of other access points are managed using a cloud controller or a local controller. When the data is indicative that at least one of the other access points is managed using the cloud controller, the access point is configured to be cloud-controller-managed. When the data is indicative that none of the other access points is managed using the cloud controller, and when the data is further indicative that at least one of the other access points is managed using the local controller, the access point is configured to be local-controller-managed.

Abstract: Disclosed herein are system, method, and computer program product embodiments for representing a forwarding information base (FIB) in a database. An embodiment operates by determining that a first routing prefix of a first forwarding entry in the FIB is a less specific routing prefix than a second routing prefix in a second forwarding entry in the FIB. The embodiment determines that a first next hop of the first routing prefix is equal to a second next hop of the second routing prefix. The embodiment removes the second forwarding entry from the FIB. The embodiment then inserts the first forwarding entry into a database (e.g., a longest exact match (LEM) database or a longest prefix match (LPM) database) based on a prefix length of the first routing prefix of the first forwarding entry.

Abstract: Methods and apparatuses enable a network of traffic control devices to be viewed as a network of services. A web client sends a query compatible with an open API to a traffic control device. The traffic control device responds to the request by providing the requested service, and indicating an additional, related service that is available externally to the responding traffic control device. Thus, the traffic control device provides network information to the web client, which is traditionally only available via a network management system. The web client can then access the external service.

Abstract: One or more implementations can include methods, systems and computer readable media for elastic wireless control planes. In some implementations, the method can include evaluating one or more elastic wireless control plane mode factors, and partitioning each of a plurality of access points into one of an active mode group and a sleep mode group based on the evaluating. The method can also include determining a number of wireless control plane instances needed based on the partitioning. The method can further include activating the number of wireless control plane instances and shutting down any excess wireless control plane instances beyond the number.

Abstract: Techniques for implementing traffic deduplication in a visibility network are provided. According to one embodiment, a packet broker of the visibility network can receive a control or data packet replicated from a core network. The packet broker can then apply a first stage deduplication process in which the packet broker attempts to deduplicate the control or data packet based on one or more interfaces of the core network from which the control ot data packet originated, and apply a second stage deduplication process in which the packet broker attempts to deduplicate the control or data packet based on the content (e.g., payload) of the control or data packet.

Abstract: Methods and systems for routing connections between federated enterprises are provided. More particularly, user location information is stored as part of a first directory accessible to a federation broker. Location information obtained in association with a requested connection is used by the federation broker to access a second directory containing the locations of points of presence within the enterprise that includes the target communication device.

Abstract: A method and apparatus for automated mirroring is presented. A network device running as a Fabric Attach (FA) server configured to mirror traffic to a Remote Switch Port Analyzer (RSPAN) Virtual Local Area Network (VLAN), issues an FA Type Length Value (TLV) on its uplink to the FA server. The TLV includes a request to associate said RSPAN VLAN with a Service Identifier (I-SID) used to carry mirror traffic in a network. The network device sends the mirrored traffic on the RSPAN VLAN on its uplink to the FA server. The network device signals the I-SID into the network, and detects receive interest in the I-SID. The network device delivers the mirrored traffic to devices that expressed a receive interest in the mirrored traffic.

Abstract: Techniques for implementing a software-based packet broker in a visibility network are provided. According to one embodiment, the software-based packet broker can comprise a network device and a cluster of one or more processing nodes. The network device can receive a control or data packet replicated from a core network and forward the control or data packet to the cluster of one or more processing nodes. At least one processing node in the cluster can then execute, in software, one or more packet processing functions on the control or data packet, where the one or more packet processing functions are operable to determine an egress port of the network device through which the control or data packet should be forwarded to a probe/tool of the visibility network for analysis.

Abstract: A function is provided in a network system for the dynamic mirroring of network traffic for a variety of purposes including the identification of characteristics of the traffic. Multiple criteria are established for when, what and where to mirror the traffic. The criteria include what frames of traffic to mirror, what portions of the selected frames to mirror, one or more portals through which to mirror the selected frames, a destination for the mirroring and the establishment of a mirror in a device to carry out the mirroring. The criteria may also include when to stop the mirroring. The mirroring instructions can be changed based on the detection of a triggering event, such as authentication, device type or status, ownership of an attached function attached to the device, flow status, but not limited to that. The function may be established in one or more devices of the network.

Abstract: A system and related method for the exchange of information, data and instructions between one or more network administrators and one or more network infrastructure devices via one or more media exchanges. Devices are managed using a social media agent including a session agent that translates media messages into network device content and vice versa while maintaining context. Particular media interfaces may be selected for messaging dependent upon the particular message to be exchanged. Shorthand may be used to facilitate messaging through media of interest.

Abstract: Embodiments generally relate to enabling configuration in networks. In one embodiment, a method includes receiving a message from an edge configuration device, wherein the message contains shortest path bridging (SPB) configuration information. The method also includes performing an intermediate system-to-intermediate system (IS-IS) configuration in response to receiving the message.

Abstract: A switching device supports a mixed mode of operation using both layer 2 and layer 3 multicast forwarding tables for multicast forwarding of packets. In the mixed mode of operation the switching device programs multicast forwarding entries in a corresponding layer 2 or layer 3 table depending on a type of protocol to be used for multicast forwarding. The switching device programs multicast forwarding entries in the layer 3 table for multicast packets forwarded using layer 3 routing protocols, and in the layer 2 table for multicast packets forwarded using layer 2 protocols. The switching device converts layer 3 multicast information to layer 2 multicast information before programming multicast forwarding entries in the corresponding layer 2 table.