Abstract: Devices, systems, methods, and processes for data plane redundancy management in network devices are described herein. A linecard in a network device may classify a plurality of packets into a first category or a second category based on whether a packet is a control packet or a data packet. The linecard may transmit all control packets and data packets to an active data plane. The linecard may selectively transmit the control packets and a sampled subset of the data packets to a standby data plane. Thus, the standby data plane is equipped with dynamic information of network using the control packets and Media Access Control addresses using the sampled subset of the data packets. When a failure is detected in the active data plane, the linecard starts transmitting all the data packets also to the standby data plane and starts accepting processed packets from the standby data plane for forwarding.

Abstract: Devices, systems, methods, and processes for discovery and assignment for unauthenticated or sleeping endpoints to appropriate VLAN. Typically, unauthenticated endpoints or endpoints that transition into sleep state are assigned to default VLAN. Thus, packets sent from a controller does not reach these endpoints. Therefore, the present disclosure provides a solution for automatic VLAN assignment of endpoints. A network device may detect a packet and upon determination that the packet is associated with a host VLAN, floods the packet on the default VLAN. This way the packet may reach all the endpoints in the default VLAN, including the unauthenticated or sleeping endpoint. The network device may receive a response from the endpoint based on successful reception of the packet. The network device may then assign the endpoint to a correct VLAN based on successful authentication of the endpoint or successful transition of the endpoint to an active mode.

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

Abstract: This disclosure describes various methods, systems, and devices related to identifying an issue in a network using a probe packet. An example method includes identifying an expired data packet transmitted in a network and addressed to a destination; generating a probe packet addressed to the destination; and forwarding the probe packet. When the probe packet is received, a report indicating a routing loop in the network can be transmitted to an administrator.

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first signature. The method further includes generating a second signature by inputting the first signature and one or more node details into a hash function. The method includes replacing the first signature with the second signature in the packet. The packet including the second value is forwarded by the node.

Abstract: An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: An exemplary method is disclosed that facilitate the on-demand creation of an exemplary instrumented network device in a cloud infrastructure, remote server, evaluation platform, or customized testing server and to form a stack between the instrumented network device as a debug network device and a target network device. The control plane of the target network device then switches over, via a switchover operation, to the control plane of the debug network device, while the data-plane of the target network device continues to operate. Once switched over, the instrumentation (e.g., hardware or software) of the control plane or debug network device facilitates the debug, optimization, profile, and/or recovery of the physical network device, even in a live network.

Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first value. The method further includes generating a second value by inputting the first value and one or more node details into a hash function. The method includes replacing the first value with the second value in the packet. The packet including the second value is forwarded by the node.

Abstract: An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: An embodiment is directed to switchover operations with a virtualized network device in a cloud or remote infrastructure. The virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: An exemplary method is disclosed that facilitate the on-demand creation of an exemplary instrumented network device in a cloud infrastructure, remote server, evaluation platform, or customized testing server and to form a stack between the instrumented network device as a debug network device and a target network device. The control plane of the target network device then switches over, via a switchover operation, to the control plane of the debug network device, while the data-plane of the target network device continues to operate. Once switched over, the instrumentation (e.g., hardware or software) of the control plane or debug network device facilitates the debug, optimization, profile, and/or recovery of the physical network device, even in a live network.

Abstract: Client device blocking may be provided. A switching device may receive data from a first client device. The data may be addressed to a second client device. Then it may be determined that both the first client device and the second client device belong to a protected group. Next, in response to determining that both the first client device and the second client device belong to the protected group, the data may be blocked from being forwarding to the second client device on a network interface of the switching device.

Abstract: An exemplary method is disclosed that facilitate the on-demand creation of an exemplary instrumented network device in a cloud infrastructure, remote server, evaluation platform, or customized testing server and to form a stack between the instrumented network device as a debug network device and a target network device. The control plane of the target network device then switches over, via a switchover operation, to the control plane of the debug network device, while the data-plane of the target network device continues to operate. Once switched over, the instrumentation (e.g., hardware or software) of the control plane or debug network device facilitates the debug, optimization, profile, and/or recovery of the physical network device, even in a live network.

Abstract: An embodiment is directed to switchover operations with a mobile virtualized network device in a mobile device. The mobile virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: An embodiment is directed to switchover operations with a virtualized network device in a cloud or remote infrastructure. The virtualized hardware switchover operations may be used to selectively and temporarily provide virtualized control-plane operations to the data-plane of a non-redundant network device undergoing an upgrade or a reboot of its control plane. A non-redundant network device may operate hitless, or near hitless, operation even when its control plane is unavailable.

Abstract: This disclosure describes various methods, systems, and devices related to identifying an issue in a network using a probe packet. An example method includes identifying an expired data packet transmitted in a network and addressed to a destination; generating a probe packet addressed to the destination; and forwarding the probe packet. When the probe packet is received, a report indicating a routing loop in the network can be transmitted to an administrator.

Abstract: This disclosure describes various methods, systems, and devices related to identifying an issue in a network using a probe packet. An example method includes identifying an expired data packet transmitted in a network and addressed to a destination; generating a probe packet addressed to the destination; and forwarding the probe packet. When the probe packet is received, a report indicating a routing loop in the network can be transmitted to an administrator.

Abstract: A controller device for a network provides data associated with pipeline capabilities of a programmable switch. The programmable switch receives data associated with pipeline capabilities of the programmable switch. The pipeline capabilities include a plurality of flow tables and allowable table transitions for each of the flow tables. The programmable switch determines that a first flow table and a second flow table are mutually independent based on the allowable table transitions for each of the flow tables. The programmable switch configures a pipeline for data flow in the computing device, the pipeline comprising a plurality of pipeline stages, a particular pipeline stage comprising the first flow table and the second flow table.