Abstract: A method and apparatus of a network element that processes a packet in the network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element receives a packet, with a packet switch unit, wherein the packet was received by the network element on an ingress interface. The network element further determines if the packet is to be stored in an external queue. In addition, the network element identifies the external queue for the packet based on one or more characteristics of the packet. The network element additionally forwards the packet to a packet storage unit, wherein the packet storage unit includes storage for the external queue. Furthermore, the network element receives the packet from the packet storage unit and forwards the packet to an egress interface corresponding to the external queue.

Abstract: A method and apparatus of a network element that installs a control plane data rule from system memory to specialized hardware memory in a network element is described. In an exemplary embodiment, the network element receives control plane data processing statistics of control plane data that is received by the network element, where the control plane data is policed using a plurality of control plane data policing rules stored in the system memory. The network element further determines that a candidate policing rule is being utilized greater than a threshold based on at least the control plane data processing statistics, where the candidate policing rule is one of the plurality of control plane data policing rules stored in the system memory. The network element additionally installs the candidate policing rule in the specialized hardware memory, where the candidate policing rule is subsequently used by the network element to police the control plane data.

Abstract: Various embodiments are described herein, which provide a network element comprising a network port to receive production network data that is used for purposes other than testing the performance of a network, a data plane coupled to the network port, the data plane including a timing module to append a time stamp to a set of one or more time stamps included within the production network data, and a control plane coupled to the data plane, the control plane including a latency analyzer to analyze the set of one or more time stamps included within the production network data.

Abstract: A method and apparatus of a network element that configures a fault detection service on a multi-link group of a network element is described. In this embodiment, the network element starts the fault detection service on a first link of the multi-link group. The network element further configures a first packet for the fault detection service and transmits the first packet on the first link. The network element additionally receives the first packet and determines if the first packet was received on the first link. If the first packet was received on a different link, the network element configures a second packet by modifying a packet characteristic of the first packet and transmits the second packet on the first link. If the first packet was received on the first link, the network element marks the fault detection service for the first link as converged.

Abstract: A method and apparatus of a network element that configures a fault detection service is described. In an exemplary embodiment, the network element starts a fault detection service for the link on each of a first supervisor and a second supervisor of the network element. In addition, the first supervisor is active and the second supervisor is standby. The network element further saves a state for the fault detection service of the second supervisor. The network element additionally, and in response to a failover from the first supervisor to the second supervisor, continues the fault detection service of the second supervisor, wherein this fault detection service is active and sends fault detection packets on the link.

Abstract: In general, the invention relates to a method for managing a real network system. The method includes configuring, using Network Device State Information (NDSI) for at least a portion of the real network system, simulated network devices for a simulated network system. The method further includes obtaining simulation conditions for the simulated network system, simulating, using the simulation conditions, operation of the simulated network system to obtain a simulation result, and initiating an update of at least a portion of the real network system corresponding to the simulated network system.

Abstract: A method and apparatus of a network element that configures a fault detection service is described. In an exemplary embodiment, the network element starts a fault detection service for the link on each of a first supervisor and a second supervisor of the network element. In addition, the first supervisor is active and the second supervisor is standby. The network element further saves a state for the fault detection service of the second supervisor. The network element additionally, and in response to a failover from the first supervisor to the second supervisor, continues the fault detection service of the second supervisor, wherein this fault detection service is active and sends fault detection packets on the link.

Abstract: In general, embodiments of the invention relate to configuring network elements to prevent the formation of logical loops in a network. More specifically, embodiments of the invention provide a mechanism to associate a port policy with all or a portion of the ports of a network element and to enforce certain types of behavior.

Abstract: Various embodiments are described herein, which provide a network element comprising a network port to receive production network data that is used for purposes other than testing the performance of a network, a data plane coupled to the network port, the data plane including a timing module to append a time stamp to a set of one or more time stamps included within the production network data, and a control plane coupled to the data plane, the control plane including a latency analyzer to analyze the set of one or more time stamps included within the production network data.

Abstract: In general, embodiments of the invention relate to configuring network elements to prevent the formation of logical loops in a network. More specifically, embodiments of the invention provide a mechanism to associate a port policy with all or a portion of the ports of a network element and to enforce certain types of behavior.

Abstract: Various embodiments are described herein that provide a network system comprising a set of peers within a link aggregation group (LAG), the first set of peers including a first network element and a second network element and a status resolution server to connect to the set of peers within the link aggregation group, wherein one or more peers within the LAG is to query the status resolution server to determine an operational status of a peer in the set of peers in response to detection of an apparent failure of the peer.

Abstract: A method and apparatus of a network element that configures a fault detection service is described. In an exemplary embodiment, the network element starts a fault detection service for the link on each of a first supervisor and a second supervisor of the network element. In addition, the first supervisor is active and the second supervisor is standby. The network element further saves a state for the fault detection service of the second supervisor. The network element additionally, and in response to a failover from the first supervisor to the second supervisor, continues the fault detection service of the second supervisor, wherein this fault detection service is active and sends fault detection packets on the link.

Abstract: A method and apparatus of a network element that configures a fault detection service on a multi-link group of a network element is described. In this embodiment, the network element starts the fault detection service on a first link of the multi-link group. The network element further configures a first packet for the fault detection service and transmits the first packet on the first link. The network element additionally receives the first packet and determines if the first packet was received on the first link. If the first packet was received on a different link, the network element configures a second packet by modifying a packet characteristic of the first packet and transmits the second packet on the first link. If the first packet was received on the first link, the network element marks the fault detection service for the first link as converged.

Abstract: A method and apparatus of a network element that installs a control plane data rule from system memory to specialized hardware memory in a network element is described. In an exemplary embodiment, the network element receives control plane data processing statistics of control plane data that is received by the network element, where the control plane data is policed using a plurality of control plane data policing rules stored in the system memory. The network element further determines that a candidate policing rule is being utilized greater than a threshold based on at least the control plane data processing statistics, where the candidate policing rule is one of the plurality of control plane data policing rules stored in the system memory. The network element additionally installs the candidate policing rule in the specialized hardware memory, where the candidate policing rule is subsequently used by the network element to police the control plane data.

Abstract: A method and apparatus of a device that converts an ordered ACL to an unordered ACL is described. In an exemplary embodiment, a network element receives an ordered access control list that includes a set of ordered rules, where each of the ordered rules includes an address range and an action. Furthermore, if two address ranges for two of the ordered rules overlap, a corresponding action of a preceding rule overrules a corresponding action of a subsequent rule for an overlapping range of addresses. The network element further converts the ordered access control list to an unordered access control list, where the unordered access control list includes a plurality of independent rules and each of the plurality of independent rules include a corresponding address range that is non-overlapping with other address ranges of the plurality of independent rules.

Abstract: A method and apparatus of a network element that processes a packet in the network element is described. In an exemplary embodiment, the network element receives a data packet that includes a destination address. The network element receives a packet, with a packet switch unit, wherein the packet was received by the network element on an ingress interface. The network element further determines if the packet is to be stored in an external queue. In addition, the network element identifies the external queue for the packet based on one or more characteristics of the packet. The network element additionally forwards the packet to a packet storage unit, wherein the packet storage unit includes storage for the external queue. Furthermore, the network element receives the packet from the packet storage unit and forwards the packet to an egress interface corresponding to the external queue.

Abstract: In general, embodiments of the invention relate to routing packets between servers in different layer 2 domains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between servers in different layer 2 domains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).

Abstract: Various embodiments are described herein, which provide a network element comprising a network port to receive production network data that is used for purposes other than testing the performance of a network, a data plane coupled to the network port, the data plane including a timing module to append a time stamp to a set of one or more time stamps included within the production network data, and a control plane coupled to the data plane, the control plane including a latency analyzer to analyze the set of one or more time stamps included within the production network data.

Abstract: Various embodiments are described herein that provide a network system comprising a set of peers within a link aggregation group (LAG), the first set of peers including a first network element and a second network element and a status resolution server to connect to the set of peers within the link aggregation group, wherein one or more peers within the LAG is to query the status resolution server to determine an operational status of a peer in the set of peers in response to detection of an apparent failure of the peer.

Abstract: In general, embodiments of the invention relate to routing packets between hosts or virtual machines in different layer 2 domains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between hosts or virtual machines in different layer 2 domains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).