Abstract: Provided are a method and an apparatus for generating a forwarding entry and a machine-readable storage medium, which are applied to a distributed resilient network interconnect (DR) network comprising a remote device and a DR device. The remote device is connected with the DR device. The DR device includes first DR member device and at least one second DR member device, each of which is connected with a host via an aggregation port. In an example of the method, when receiving first synchronous message carrying address information of the host from the first DR member device and the first synchronous message carries an identifier of the aggregation port, the remote device determines that the remote device connects the DR device via at least two tunnels of the aggregation port according to the identifier, and generates a forwarding entry corresponding to the host according to information of each of the tunnels.

Abstract: A Software Defined Network (SDN) controller determines a plurality of paths for transmitting a data stream from a first network device to a second network device. The SDN controller assigns to each of the plurality of paths a path identifier, where the path identifier is uniquely corresponding to the path and the specified service. The SDN controller delivers forwarding information to a network device other than the second network device on the path. The forwarding information is configured to instruct forwarding a data stream carrying the path identifier of the path to a next hop on the path of a network device receiving the forwarding information. The SDN controller selects a path from the plurality of paths and transmits a path identifier of the selected path to the first network device. The first network device adds the path identifier of the selected path to the data stream of the specified service.

Abstract: A method and an apparatus for building a decision tree for packet classification are provided. According to an example of the present disclosure, a first type decision tree is generated by performing tree building for a classification rule set based on a non-template dimension of the classification rule set; a second type decision tree is generated by performing tree building for each leaf node in the first type decision tree based on a template dimension of the classification rule set; a plurality of leaf nodes that are mutually of the to each other in the first type decision tree are associated with a same second type decision tree. The plurality of leaf nodes that are SPSR to each other indicate that classification rule sets respectively included in the plurality of leaf nodes are SPSR to each other.

Abstract: Methods of scheduling resources, distributed access gateway devices and machine-readable storage devices are provided in examples of the present disclosure. In one aspect, a first service board on a distributed access gateway device creates a first software user entry corresponding to a first user on a data plane, determines whether there is an idle hardware resource on the first service board, obtains a slot ID of a second service board comprising an idle hardware resource on the data plane when determining that there is no idle hardware resource on the first service board, and sends the first software user entry to the second service board according to the slot ID of the second service board on the data plane such that the second service board creates a first hardware user entry corresponding to the first user on a data plane of the second service board.

Abstract: A packet-transmission method, a local edge device and a machine-readable storage medium are provided. The method includes: receiving a first notification message from an opposite edge device, parsing out a first host route from the first notification message, and adding a first forwarding table entry to a software forwarding table, wherein the first forwarding table entry includes a correspondence between the first host route and an interface receiving the first notification message; inquiring, after receiving a packet, a hardware forwarding table according to a destination address of the packet, if there is no forwarding table entry matched with the destination address in the hardware forwarding table, inquiring the software forwarding table according to the destination address of the packet, if there is a forwarding table entry matched with the destination address in the software forwarding table, sending the packet according to the forwarding table entry matched with the destination address.

Abstract: A fault identification apparatus includes a detector and a plug interface connected with the detector, where the plug interface includes a first measuring terminal and a second measuring terminal; when fault identification is performed for a PSU in a communication apparatus under test, the first measuring terminal is connected with a first end of the PSU, and the second measuring terminal is connected with a second end of the PSU; and the detector obtains a voltage value between the first measuring terminal and the second measuring terminal to determines whether a failure occurs to the PSU based on the voltage value.

Abstract: In an example of a method of synchronizing a route, a first VTEP in a first EVPN learns an address of a first VM connected with the first VTEP; sends the learned address to a second VTEP connected with the first VTEP via a first EVPN route, where the second VTEP belongs to any of the first EVPN and a second EVPN of a different level from the first EVPN; receives a second EVPN route carrying an address of a second VM and a destination IP address for establishing a VXLAN tunnel; creates a route entry containing the address of the second VM, and nexthop information contained in the route entry is the destination IP address carried in the second EVPN route; and establishes a VXLAN tunnel between the first VTEP and a VTEP identified by the destination IP address carried in the second EVPN route.

Abstract: A method and device for electing a designated forwarder (DF) are provided. According to the method, NLRI sent by a second (PE) of the PEs is received, and a first election policy set supported by the second PE, and a first priority corresponding to each election policy in the first election policy set is parsed out. A target election policy is determined by using a second election policy set supported by a first PE, a second priority corresponding to each election policy in the second election policy set, the first election policy set supported by the second PE and the first priority corresponding to each election policy in the first election policy set. A DF is elected from the first PE and the second PE by using the target election policy.

Abstract: A method and a device for controlling user access to a wireless network are provided. According to an example of the method, during master/backup changeover between an master main board and a backup main board in a switch, an AP may start a timer in case of short-term communication interruption between the AP and an master AC due to the master/backup changeover. In this way, if the interruption is within an allowable time period, the AP may maintain connections between the AP and authenticated users instead of imposing offline on the authenticated users.

Abstract: A network segment route and a host route are advertised to a Spine node; the network segment route advertised by the Spine node is learned; when a first packet hits the network segment route, the first packet is sent to a Spine node corresponding to a next hop of the hit network segment routes so that the Spine node sends the first packet to a Leaf node corresponding to a next hop of a host route hit by the first packet.

Abstract: A method, an apparatus and a VTEP for synchronizing MAC address are provided. According to the method, first mapping relationship configured on first aggregation/IPP port of first VTEP is notified to second VTEP in a same MLAG system. The second VTEP configures the relationship on second aggregation/IPP port of the second VETP. The relationship represents a mapping relationship of first tag ID of first port of the first VTEP to first VXLAN ID. Second tag ID of second port of the second VTEP differs from the first tag ID. The first VTEP receives a successful configuration message returned by the second VTEP after successfully configuring the relationship on the second IPP port. The first VTEP then sends first MAC address to the second IPP port via the first IPP port, wherein the first MAC address is the MAC address of a device accessing the first VTEP via the first port.

Abstract: A method of forwarding a packet and a VXLAN Tunnel End Point (VTEP) are provided. In an example, the VTEP obtains a route of a specified role, which is advertised to a remote VTEP. Then the remote VTEP distributes packets to be transmitted to the specified role to VTEPs in a multihoming group based on the route. The multihoming group includes VTEPs that the specified role is homed to, and next hop of the route is a group address of the multihoming group. The VTEP receives the packet to be transmitted to the specified role from the remote VTEP; and transmits the packet to another VTEP in the multihoming group when a link between the VTEP and the specified role fails, such that the other VTEP transmits the packet to the specified role.

Abstract: A NAT method, apparatus and device are provided. According to the method, a target IP address and its reference port are obtained from a NAT resource pool, the reference port being a port in a corresponding consecutive port range. A first five-tuple is generated based on the target IP address, the reference port and an original five-tuple of the packet, and a second five-tuple is obtained by masking first-class bits of the reference port of the first five-tuple. Based on a hash result of the second five-tuple, a target bit indicating a non-conflicting state is determined from a pre-constructed bitmap. The state indicated by the target bit is set to be a conflicting state, and a target five-tuple is generated based on the target bit. The target five-tuple and the original five-tuple are recorded in a session table, and the packet is NAT-processed based on the target five-tuple.

Abstract: The present disclosure discloses methods of controlling network access, NASs and non-transitory machine-readable storage mediums. In an example of the present disclosure, when a terminal comes online for a first time, a NAS obtains a temporary role for a terminal; when receiving an IP address request from the terminal, the NAS requests an IP address for the terminal, wherein a lease for the temporary IP address is a set minimum lease; the NAS forces the terminal to go offline when the portal authentication is successful; when the terminal comes online for a second time, the NAS obtains a service role for the terminal; when receiving an IP address request sent by the terminal at expiry of the lease for the temporary IP address, the NAS requests a service IP address for the terminal, wherein the service IP address belongs to an IP network segment corresponding to the service role.

Abstract: A VXLAN Tunnel End Point (VTEP) sends an authentication request packet to an authentication server upon receiving a user access request from a user terminal, so as to cause the authentication server to perform an authentication for a user. The VTEP receives authorization information of the user for which the authentication is passed. The authorization information is sent by the authentication server, and includes a Virtual Switch Instance (VSI) identifier or a Virtual eXtensible LAN (VXLAN) identifier. The VTEP creates an Attachment Circuit (AC) interface on a user port connecting the user terminal of the VTEP. The VTEP associates the AC interface with the authorization information.

Abstract: By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.

Abstract: A method and an apparatus for switching between master and standby container systems are provided. The method may be applied to a first container system deployed in a physical network device and functioning as a master container system, and a shared file is created in the physical network device. The method includes: receiving a system upgrade instruction input by a user; in response to the system upgrade instruction, sending container system data to a second container system functioning as a standby container system corresponding to the master container system in the physical network device; when receiving a data backup completion notification from the second container system, writing a master/standby container system switching notification into the shared file, so that the second container system switches to function as the master container system when detecting that the master/standby container system switching notification in the shared file.

Abstract: According to examples of the present disclosure, an access point (AP) device, an Internet of Things (IoT) device, and a communication device are provided. The AP device may include an AP housing, a control board arranged within the AP housing, and a first electrical connecting part and a first assembly part arranged on the AP housing. The control board and the IoT device are electrically connected by the first electrical connecting part. The AP device may assemble with the IoT device by way of the first assembly part.

Abstract: Methods of establishing an entry corresponding to equal cost paths, network devices and non-transitory machine-readable storage medium are provided. In one aspect, the network establishes a FIB entry, where the FIB entry includes the number of UCMP entries UCMP table corresponding to N paths configured to be equal cost with each other between the network device and a destination network device, where an address of the destination network device, and the number of the UCMP entries in the UCMP table is equal to a preset fixed value; and assigns at least one UCMP entry for each of the N paths based on respective weights of the paths and the fixed value, where the at least one ECMP entry corresponding to the path respectively includes index information corresponding to the path.

Abstract: A Software Defined Network (SDN) controller receives a detecting packet reported by a first switch and initiated by a first device. The SDN controller sends, for each of switches having an SDN connection with the SDN controller, the detecting packet and information of all downlink ports of the switch to the switch in a way that the switch is capable of sending the detecting packet through the downlink port. The SDN controller receives a response packet which is sent by a second switch and initially generated by a second device in response to receiving the detecting packet from the second switch, wherein an IP address of the second device matches a destination IP address of the detecting packet. The SDN controller sends forwarding configuration information to the second switch in a way that the second switch is capable of configuring a port through which the response packet is received.