Patents Assigned to Juniper Networks
  • Methods and apparatus for enforcing a common user policy within a network
    Patent number: 8804620
    Abstract: In some embodiments, an apparatus includes a core network node configured to be operatively coupled to a set of wired network nodes and a set of wireless network nodes. The core network node is configured to receive, at a first time, a first data packet to be sent to a wired device operatively coupled to a wired network node from the set of wired network nodes. The core network node is configured to also receive, at a second time, a second data packet to be sent to a wireless device operatively coupled to a wireless network node from the set of wireless network nodes. The core network node is configured to apply a common policy to the first data packet and the second data packet based on an identifier of a user associated with both the wireless device and the wired device.
    Type: Grant
    Filed: October 4, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Raghavendra Mallya, James Murphy, Abhijit Choudhury, Pranay Pogde, Phalguni Nanda, Jayabharat Boddu, Pradeep Sindhu
  • Switching device
    Patent number: 8804709
    Abstract: A switching device in a network system for transferring data includes one or more source line cards, one or more destination line cards and a switching fabric coupled to the source line cards and the destination line cards to enable data communication between any source line card and destination line card. Each source line card includes a request generator to generate a request signal to be transmitted in order to obtain an authorization to transmit data. Each destination line card includes a grant generator to generate and send back a grant signal to the source line card in response to the request signal received at the destination line card to authorize the source line card to transmit a data cell to the destination line card.
    Type: Grant
    Filed: March 9, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Pradeep S. Sindhu, Philippe G. Lacroute, Matthew A. Tucker, John D. Weisbloom, David B. Winters
  • System architecture for a scalable and distributed multi-stage switch fabric
    Patent number: 8804710
    Abstract: In some embodiments, an apparatus includes a first housing, a second housing and at least one cable. The first housing includes a first interface card of a switch fabric. The second housing includes a second interface card of the switch fabric and a third interface card of the switch fabric. The second interface card of the switch fabric is operatively and physically coupled to the third interface card of the switch fabric via a midplane. The second interface card defines a plane that is nonparallel to the a plane defined by the third interface card and a plane defined by the midplane. The plane defined by the third interface card is nonparallel to the plane defined by the second interface card and the plane defined by the midplane. The cable is configured to operatively couple the first interface card to the second interface card.
    Type: Grant
    Filed: December 29, 2008
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Gunes Aybay, Jaya Bandyopadhyay, Jean-Marc Frailong, Pradeep Sindhu, Philip A. Thomas, Anjan Venkatramani
  • Systems and methods for automatically detecting network elements
    Patent number: 8806031
    Abstract: A system and method for the automated configuration of network resources is described. In one embodiment, a network management device can manage virtual network entities, such as virtual network switch fabrics, by provisioning physical network resources for and deallocating physical network resources from virtual network entities. The network management device can determine available physical network resources by broadcasting request signals to physical network resources and listening for advertisement response signals from available physical network resources.
    Type: Grant
    Filed: December 15, 2010
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Umesh Kondur, Quaizar Vohra, Neha A. Kaushil
  • Provisioning network access through a firewall
    Patent number: 8806605
    Abstract: A method may include determining one or more rules and communicating the one or more rules to a firewall, where the firewall receives a data unit and determines, based on the one or more rules, whether to forward the data unit to a destination address; receiving a redirection of a device from the firewall when the firewall determines not to forward the data unit to the destination address; receiving an indication that the firewall did not forward the data unit to the destination address; and determining a new rule to allow the firewall to forward the data unit to the destination address and communicating the new rule to the firewall; and redirecting the device to the destination address.
    Type: Grant
    Filed: January 11, 2008
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventor: Roger A. Chickering
  • Server selection during retransmit of a request
    Patent number: 8806043
    Abstract: A method, performed by a network device, may include sending a request to a first server, detecting a first timeout without receiving a response from the first server, and sending the request to the first server and to a second server, in response to detecting the first timeout without receiving a response from the first server.
    Type: Grant
    Filed: June 24, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Sureshkannan Duraisamy, Dhiraj D. Ballal, Apurva Mehta, Santosh Gupta, Kumar Mehta, Venkatesh Gota, Bill Hong
  • Methods and apparatus for implementing access control at a network switch
    Patent number: 8804708
    Abstract: A switch device is configured to receive a data unit from a virtual port from a first set of virtual ports. The switch device is configured to associate an identifier of each virtual port from the first set of virtual ports with an identifier of a first access group that is associated with an access set. The switch device is configured to prohibit the data unit from being sent to a remaining virtual port from the first set of virtual ports if the data unit is addressed to that virtual port. The switch device is configured to otherwise allow the data unit to be sent to a virtual port from a second set of virtual ports associated with a second access group when the second access group is associated with the access set. The second set of virtual ports is mutually exclusive from the first set of virtual ports.
    Type: Grant
    Filed: December 21, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Joseph White, Ronak Shah, Simon Gordon
  • Virtual local area network (VLAN)-based membership for multicast VLAN registration
    Patent number: 8804726
    Abstract: A network node that includes a memory to store a multicast forwarding table that contains entries that govern how multicast traffic is to be forwarded from a multicast virtual local area network (MVLAN) associated with the network node, to receiver VLANs associated with the network node, where each entry includes a multicast group, that is associated with a group of ports on the multicast VLAN via which the multicast traffic is received, and information associated with the receiver VLANs to which the received multicast traffic is to be sent.
    Type: Grant
    Filed: February 5, 2013
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Anish Mehta, Soumen Biswas, Sadiq Shaikh
  • Scalable forwarding table with overflow address learning
    Patent number: 8804735
    Abstract: A node is configured to receive a packet from a host device, where the packet includes a source address associated with the host device; determine that the source address is not stored by the node; generate one or more logical distances, associated with one or more nodes, based on the source address and a respective address associated with each of the nodes; determine that another node is associated with a shortest logical distance, of the one or more logical distances; and transmit the source address to the other node based on the determination that the other node is associated with the shortest logical distance, where transmitting the source address allows the other node to store the source address or enables further nodes to obtain the source address from the other node.
    Type: Grant
    Filed: July 18, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Yafan An, Sandeep Kumar, Gunes Aybay, Rakesh Dubey
  • Using encoded identifiers to provide rapid configuration for network access
    Patent number: 8806567
    Abstract: A user device receives a captured image of an encoded identifier, analyzes the encoded identifier via the captured image, and extracts, based on the analysis, network access configuration data from the encoded identifier. The user device provides the network access configuration data to a network access control (NAC) device, and receives, based on the network access configuration data, access to the NAC device. The user device permits the NAC device to inspect the user device via the access to the NAC device, and receives, based on the inspection of the user device, access to a network.
    Type: Grant
    Filed: December 16, 2010
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventor: Jeffrey C. Venable, Sr.
  • Methods and apparatus for producing a hash value based on a hash function
    Patent number: 8804950
    Abstract: In one embodiment, a method includes receiving a bit value from a key vector. The bit value has a position within the key vector correlating to a counter value. The method includes receiving a sequence of bit values from a plurality of predefined bit values based on the counter value and in response to a condition associated with the bit value from the key vector being satisfied.
    Type: Grant
    Filed: September 30, 2008
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventor: Ramesh Panwar
  • Processing packets by a network device
    Patent number: 8804739
    Abstract: A method and apparatus for performing a lookup in a switching device of a packet switched network where the lookup includes a plurality of distinct operations each of which returns a result that includes a pointer to a next operation in a sequence of operations for the lookup. The method includes determining a first lookup operation to be executed, executing the first lookup operation including returning a result and determining if the result includes a pointer to another lookup operation in the sequence of operations. If the result includes a pointer to another lookup operation, the lookup operation indicated by the result is executed. Else, the lookup is terminated.
    Type: Grant
    Filed: April 30, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Dennis C. Ferguson, Rajiv Patel, Gerald Cheung, Pradeep S. Sindhu
  • Wireless access points with modular attachments
    Patent number: 8804622
    Abstract: A wireless access point may include a processor to communicate with a management device over a network; a wired Ethernet interface to the network; and a wireless interface to connect, using a local wireless protocol, to one or more client computing devices, where the wireless access point provides an access point for the one or more client computing devices to connect to the network. The wireless access point may further include an interface to provide a local connection to a modular device, where the processor is to transmit, over the network, data received from the modular device to the management device or data received from the management device to the modular device; and a housing to contain the processor, the wired Ethernet interface, the wireless interface, and the interface to provide the local connection.
    Type: Grant
    Filed: December 30, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Chris Thai, Steve Grau, Nozar Azarakhsh
  • Effective network identity pairing
    Patent number: 8806033
    Abstract: A network device may receive a request from a local device to establish a connection with a another device. The request may include an internal network identifier of the local device. The network device may evaluate a plurality of external network identifiers, associated with the network device based on selected criteria. The network device may also, or alternatively, evaluate the external network identifiers by identifying an external network identifier that is already mapped to, or paired with, the internal network identifier. The network device may select an external network identifier, of the plurality of external network identifiers, based on the evaluation and establish the connection requested by the local device using the internal network identifier and the external network identifier.
    Type: Grant
    Filed: June 30, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Suresh Kumar Vinapamula Venkata, Rajesh Mohan, Sarat Kamisetty, Reinaldo Penno, Sanjay V. Agrawal
  • Rule tree for network device
    Patent number: 8806059
    Abstract: A method may include receiving a packet; determining a set of characteristics of the packet; searching a first tree structure for a rule matching the set of characteristics, where the first tree structure stores a first group of rules, and where each of the first group of rules has a first number and a first type of criteria; searching a second tree structure for the rule matching the set of characteristics, where the second tree structure stores a second group of rules, and where each of the second group of rules has a second number and a second type of criteria, where the number and type of criteria of the second group of rules are different at least in part than the number and type of criteria of the first tree structure; and performing an action if the rule matching the set of characteristics is found.
    Type: Grant
    Filed: April 5, 2007
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: James Washburn, Sukhesh Halemane
  • Enhanced pulse assisted time synchronization protocol
    Patent number: 8806063
    Abstract: A network device may include a timing module and at least one interface. The timing module determines a local time of the network device indicating when the network device sends a synchronization start message. The at least one interface sends the synchronization start message to a time client device to set the current time of day on the time client device, receives a synchronization response message from the time client device indicating that the current time of day of the time client device was set, and sends a synchronization success message to the time client device indicating that the time client device has correctly set its current time of day.
    Type: Grant
    Filed: July 11, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Prakash Kamath, Apurva Mehta, Kamatchi Gopalakrishnan, Rajagopalan Subbiah, Rohit Puri, Vikram Bobade
  • Methods and apparatus for a distributed control plane
    Patent number: 8804571
    Abstract: In some embodiments, an apparatus includes a first network control entity configured to be implemented at a first edge device. The first network control entity is configured to receive a control packet from a peripheral processing device via a tunnel that is between the peripheral processing device and the first network control entity and that includes at least a portion within a second edge device. The first network control entity is configured to determine routing information associated with the peripheral processing device based on the control packet. The first network control entity is configured to send the routing information to a second network control entity such that the second network control entity routes a data unit addressed to the peripheral processing device to the second edge device without sending the data unit to the first edge device.
    Type: Grant
    Filed: September 14, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Manoj Tiwari, Ravi Shekhar, Quaizar Vohra, Ronak Shah, Prasennaram Dhanushkodi
  • Clustered AAA redundancy support within a radius server
    Patent number: 8806580
    Abstract: In general, techniques are described for supporting interchassis redundancy (ICR) by a plurality of network access servers (NASes) that are members of an ICR. For example, techniques may be used to associate, within a RADIUS server, multiple NAS identifiers for the NASes with a single NAS identifier alias. The RADIUS server is configured to handle RADIUS protocol messages from any member of the ICR cluster as though the RADIUS protocol messages issued from a single NAS having the NAS identifier alias.
    Type: Grant
    Filed: January 18, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Subash Tirupachur Comerica, Dhiraj D. Ballal
  • Network tunneling using a label stack delimiter
    Patent number: 8804736
    Abstract: An ingress router of a provider network receives a packet from a customer network, determines that the packet includes a customer network label and that the packet is to be tunneled through the provider network, based on the determination, adds a delimiter label to the packet indicative of a bottom of a provider network label stack and one or more provider network labels to the packet, and forwards the packet to a next routing device along the provider network tunnel. An egress routing device of the provider network receives a packet comprising a provider network label stack, removes the provider network label stack from the packet, determines whether the packet comprises a delimiter label following the provider network label stack, and, when the packet comprises the delimiter label, forwards the packet to a customer network interface device.
    Type: Grant
    Filed: September 23, 2011
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: John E. Drake, Rahul Aggarwal, Nitin Bahadur, Nischal Sheth
  • Ager ring optimization
    Patent number: 8805988
    Abstract: A device provides an ager ring that ages entries associated with managed resource of a device, and determines whether a particular entry associated with a particular managed resource of the device is to be updated. The device also updates, when the particular entry is to be aged out in a particular time frame, the particular entry in the ager ring based on a bucket offset and a current time bucket associated with the particular entry and based on a current time, a refresh timeout, and a maximum timeout associated with the ager ring. The device further updates, when the particular entry is being aged during processing, the particular entry in the ager ring based on a new bucket, the current time bucket, and the bucket offset associated with the particular entry and based on the maximum timeout associated with the ager ring.
    Type: Grant
    Filed: February 10, 2012
    Date of Patent: August 12, 2014
    Assignee: Juniper Networks, Inc.
    Inventors: Tian Chen, Jane Wu