Abstract: A router has a shape graph that is a compressed form of a trie that represents routing information for routing data packets in a network, and an update data structure that includes plural entries corresponding to nodes of the shape graph, the plural entries containing count values indicating respective numbers of nodes of the tie represented by the corresponding nodes of the shape graph. The router incrementally updates the shape graph as a portion of the routing information changes, where the incremental updating uses information in the update data structure.

Abstract: A control device may manage a switch device within a same software defined network (SDN) of the control device, manage a topology structure of an SDN corresponding to the SDN instance managed by the control device, and calculate flow paths based on the topology structure.

Abstract: A network access device may obtain user fingerprint information of a terminal. The network access device may transmit the user fingerprint information of the terminal to a portal server, before the terminal is authenticated, so that the portal server may push to the terminal an authentication page corresponding to the user fingerprint information of the terminal.

Abstract: According to an example, an Edge Virtual Bridging (EVB) station is configured with a VM, an ER and multiple physical network cards. The VM is configured with multiple virtual network cards and each virtual network card has one VSI. Each VSI is connected with one of the physical network cards via the ER. One of the physical network cards is configured as a primary physical network card, and another is configured as a secondary physical network card. A VSI corresponding to the primary physical network card is configured as a primary virtual interface, and a VSI corresponding to the secondary physical network card is configured as a secondary virtual interface. After determining the primary physical network card failed, the secondary physical network card is configured as a new primary physical network card, and the secondary virtual is configured as a new primary virtual interface.

Abstract: According to an example, after a primary port of a primary switch and a secondary port of a secondary switch are connected to each other and the primary port is configured to operate in a fabric mode, the primary switch may send a mode switch request packet to the secondary switch through the primary port. The secondary switch may change the secondary port from operating in an Ethernet mode to the fabric mode based on information contained in the mode switch request packet and may send a mode switch response packet to the primary switch.

Abstract: An access device receives a neighbor discovery protocol (NDP) packet sent from a user equipment (UE). The access device parses the NDP packet to obtain equipment information of the UE carried by the NDP packet. The access device transmits reporting message to a management server, wherein the reporting message carries the equipment information of the UE. Upon receiving a notification for identity authentication of the UE from the management server, the access device initiates an identity authentication invitation to the UE. The access device submits identity authentication information of the UE to the management server for authentication. The access device stores a first access control entry for the UE issued by the management server in its own data plane to control the UE's access to network resources after the identity authentication of the UE is permitted.

Abstract: A data forwarding device includes a plurality of server interface units, a plurality of virtual network card units, a fusion switching unit and a network interface unit. A server interface unit of the plurality of server interface units to obtain a data frame to be sent by a virtual network card driver running on a server corresponding to the server interface unit and obtain a first fusion descriptor, and to send the first fusion descriptor and the data frame to a virtual network card unit that corresponds to the virtual network card driver, wherein the first fusion descriptor comprises a type of the descriptor and a length of the data frame. The virtual network card unit is to process the data frame according to the first fusion descriptor, and to send a processed data frame to the fusion switching unit.

Abstract: A method for forwarding a Software Defined Networking (SDN) packet, applied in a data forwarding device in a SDN network, comprising: dividing a flow table with a plurality of flow table entries according to a class in advance, and obtaining multi-layer flow tables serial in sequence; wherein each layer of flow table corresponds to a class of flow table; and receiving a SDN packet, searching each layer of flow table in sequence according to a precedence order of the multi-layer flow tables, or directly pointing to a specified flow table to search a matched flow table entry, and processing the SDN packet.

Abstract: A method is described in which a first shortest path bridging (SPB) node and a neighboring second SPB node are connected via n links; a plurality of different neighborhoods are established between the first node and the second SPB node; and a shortest path first (SPF) tree is calculated in accordance with the links with the same cost.

Abstract: According to an example, in a method and an apparatus for expanding member ports of a link aggregation group between clusters, each apparatus in a cluster receives a port joining link aggregation group message sent by a master control board on a master apparatus in the cluster. In response to an apparatus determining that a newly joined port is a port on the apparatus itself and also is the first member port in the link aggregation group of the cluster, the newly joined port is associated with the link aggregation group. By applying the method and the apparatus for expanding member ports of a link aggregation group between clusters in this manner, according to an example, the number of member links in the link aggregation group between clusters is able to be increased, and the robustness of the network interconnection between clusters is also able to be enhanced.

Abstract: A data forwarding device includes a plurality of server interface units, a plurality of virtual network card units and a network interface unit. A server interface unit of the plurality of server interface units is to obtain a data frame to be sent by a virtual network card driver running on a server corresponding to the server interface unit and obtain a first fusion descriptor, and to send the first fusion descriptor and the data frame to a virtual network card unit that corresponds to the virtual network card driver, wherein the first fusion descriptor comprises a type of the descriptor and a length of the data frame. The virtual network card unit is to process the data frame according to the first fusion descriptor, and to send a processed data frame to the network interface unit. The network interface unit is to forward the processed data frame to an external network.

Abstract: A service logic layer module receives an application message forwarded by a network device, classifies and identifies an application type of the application message, and determines a first processing operation to be performed to the application message based on an identification result. The service logic layer module receives a processing result returned from a data processing layer module, and determines a second processing operation based on the processing result. When the processing operation is an I/O processing operation for a single task, the data processing layer module controls I/O concurrency processing of the single task and returns a final processing result to the service logic layer module. When the processing operation is a data searching operation, the data processing layer module performs the data searching operation to obtain a final searching result, and returns the final searching result to the service logic layer module.

Abstract: A method to create virtual machines is provided. An initially empty primary copy-on-write (COW) image of a base disk image is created, and an initially empty secondary COW image of the primary COW image is created. A virtual machine is booted from the secondary COW image. Writes by the virtual machine are stored in the secondary COW image. When the secondary COW image reaches a capacity threshold, data of the secondary COW image is committed into the primary COW image and then the secondary COW is cleared of data.

Abstract: A method of establishing network connection between a network device and a WLAN is disclosed. The method includes: determining whether there is previous security association between the network device and the WLAN at the time of requesting for network association, and establishing a new security association between the network device and the WLAN using security data generated in the course of establishing the previous security association if there is the previous security association.

Abstract: A network device configures a unique ring number for each interface in a ring network and stores the ring number. The network device receives a RSVP confirmation packet from a next-hop network device, storing a route object record contained in the RSVP confirmation packet. The network device parses the route object record of the primary tunnel, searches for an end network device on the primary tunnel in the same ring network, sets the end network device as a destination network device of a protection tunnel of the network device, sets the network device as a start network device of the protection tunnel, and store path information of the protection tunnel. An interface of the end network device has the same ring number with an egress interface of the network device.

Abstract: The present disclosure provides a method and apparatus for forwarding a packet, wherein the method comprising: for each Virtual Machine (VM) in the server, obtaining relevant information of a virtual Network Interface Controller (vNIC) of the VM, and associating the obtained relevant information with a local virtual port, wherein the relevant information includes a Media Access Control (MAC) address of the vNIC, a Virtual eXtensible Local Area Network (VXLAN) Network Identifier (VNI) of the VXLAN where the vNIC is located, and a Virtual Local Area Network (VLAN) Identifier (ID) of a VLAN associated with the VXLAN where the vNIC is located; after receiving an Ethernet packet sent by the server, searching a VNI according to a source MAC address of the Ethernet packet and a VLAN ID; and according to the searched VNI, encapsulating the Ethernet packet, obtaining a VXLAN packet, and forwarding the VXLAN packet.

Abstract: According to an example, in a method for calculating a route, a first network device may add a protocol attribute supported by a link to a link state protocol data unit (LSP) of the first network device according to a protocol attribute supported by a port of the first network device and a protocol attribute supported by a port of a neighbor network device when establishing an adjacency, and may flood the LSP. The first network device may receive a LSP from a neighbor network device, parse a protocol attribute supported by a link contained in the received LSP, record the protocol attribute supported by the link contained in the received LSP in local network topology information, to obtain updated network topology information. And the first network device may calculate a route according to the updated network topology information. A network device and a computing device may calculate a route.

Abstract: A packet forwarding control method is described in which a candidate core backbone (CB) set corresponding to a port extender (PE) device is determined in accordance with a predetermined first selection rule when a ring topology is formed.

Abstract: According to an example, port negotiation between FCFs is implemented through initiation of a negotiation to an opposite party corresponding to a VFC port on a FCF within a VLAN corresponding to each VSAN supported by the VFC port on the FCF. The port negotiation also includes a determination of an intersection of the VSAN and the VLAN supported by the VFC port and the VSAN and the VLAN supported by the opposite party corresponding to the VFC port on the FCF and performance of an ELP negotiation within the intersection of the VSAN and the VLAN.

Abstract: According to an example, a packet to be processed is compared with a rule in a combined access control list (ACL), wherein the combined ACL includes rules corresponding to different service types.