Abstract: A media access control (MAC) security apparatus for a local area network interface includes a parser, an encryption engine, an authentication engine, and a first buffer. The parser is configured to output packets. The encryption engine is configured to receive the packets from the parser and generate encrypted data based on the packets received from the parser and cryptographic primitives. The encryption engine includes an advanced encryption standard engine configured to form the cryptographic primitives. The authentication engine is configured to perform authentication operations of the local area network interface based on the encrypted data from the encryption engine. The first buffer is configured to interface the encryption engine to the parser. The parser and the encryption engine process data at different rates. The first buffer is configured to compensate for the different rates.

Abstract: A method and system for the assignment of security group information using a proxy is disclosed. The method includes receiving an address of a network device at a first network device, receiving a security group of the network device at the first network device and associating the address information and the security group information with one another at the first network device. The first network device is coupled to a second network device. The address is represented by address information, which is received from the second network device. The security group is identified using the security group information, which indicates the network device is a member of the security group. The address information and the security group information are associated with one another by storing the address information and the security group information at the first network device.

Abstract: A media access control (MAC) security apparatus for a local area network interface includes multiple independently controlled power domains, each of which enters and exits a reduced power state independent of others of the power domains. An encryption/decryption engine, located within a first of the power domains, generates encrypted data in response to received packets and cryptographic primitives. An authentication engine, located within a second of the power domains, performs authentication operations in response to the encrypted data. The encryption/decryption engine comprises an advanced encryption standard engine that forms the cryptographic primitives and is located within a third of the power domains. The third power domain enters the reduced power state for part of a period during which (i) the first power domain does not enter the reduced power state and (ii) the encryption/decryption engine is generating the encrypted data.

Abstract: A media access control (MAC) security apparatus including an encryption/decryption engine and an authentication engine. The encryption/decryption engine is configured to generate encrypted data based on received packets. The authentication engine is configured to perform authentication in response to the encrypted data. The encryption/decryption engine includes an advanced encryption standard (AES) engine configured to form cryptographic primitives. The AES engine is configured to enter a reduced power consumption state for part of a period during which the encryption/decryption engine is generating encrypted data based on the received packets.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: A method and system for the assignment of security group information using a proxy is disclosed. The method includes receiving an address of a network device at a first network device, receiving a security group of the network device at the first network device and associating the address information and the security group information with one another at the first network device. The first network device is coupled to a second network device. The address is represented by address information, which is received from the second network device. The security group is identified using the security group information, which indicates the network device is a member of the security group. The address information and the security group information are associated with one another by storing the address information and the security group information at the first network device.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: A method and apparatus for performing MAC security (MACSec) operations. In one embodiment, the apparatus comprises a plurality of discrete elements coupled together to perform MAC security processing, the plurality of discrete elements able to operate on distinct packets related to MAC security simultaneously, and wherein each of the plurality of discrete elements is in an independently controlled power domain that enters a reduced power consumption state independently of other discrete elements in the plurality of discrete elements when not in use.

Abstract: A method and system for the assignment of security group information using a proxy is disclosed. The method includes receiving an address of a network device at a first network device, receiving a security group of the network device at the first network device and associating the address information and the security group information with one another at the first network device. The first network device is coupled to a second network device. The address is represented by address information, which is received from the second network device. The security group is identified using the security group information, which indicates the network device is a member of the security group. The address information and the security group information are associated with one another by storing the address information and the security group information at the first network device.

Abstract: The present disclosure includes systems and techniques relating to virtual Ethernet switches. In some implementations, a system includes two or more Ethernet switches. Two or more components are included in the system to open at least one tunnel, over a network, between the two or more Ethernet switches to connect the two or more Ethernet switches together. In addition, two or more components are included in the system to operate a protocol over the opened at least one tunnel to manage the two or more Ethernet switches as a single unit that shares at least one network feature among all of the two or more Ethernet switches.

Abstract: A method and system for the assignment of security group information using a proxy is disclosed. The method includes receiving an address of a network device at a first network device, receiving a security group of the network device at the first network device and associating the address information and the security group information with one another at the first network device. The first network device is coupled to a second network device. The address is represented by address information, which is received from the second network device. The security group is identified using the security group information, which indicates the network device is a member of the security group. The address information and the security group information are associated with one another by storing the address information and the security group information at the first network device.