Abstract: Implementations of the disclosure are directed to using a distributed ledger network to synchronize configuration changes across a network of servers that provide authentication, authorization, and accounting (AAA). In some implementations, a method includes: receiving, at a first server that provides AAA of users that access a network, a user request to update a configuration of a database of the first server, the database including authentication credentials for users that access the network, in response to receiving the user request, transmitting a transaction to the distributed ledger network for validation, the transaction comprising a request by the first server for each server of the distributed ledger network to update their respective database configuration in accordance with the user request; and after the transaction is validated by the distributed ledger network, the first server updating its database configuration in response to receiving the update comprising the validation of the transaction.

Abstract: Example implementations relate to configuring network devices. For example, a network device includes a controller module to receive a link layer discovery protocol (LLDP) message from a second network device in response to determining that connection to a management device has failed. The controller module is to send a second LLDP message to the second device, where information contained is the second LLDP message is routed to the management device by the second device. The controller module is further to receive configuration changes from the management device and connect to the management device based on the configuration changes, where the configuration changes are routed by the second device.

Abstract: In some examples, a network device may determine an uptime of a first port and a second port, compare the uptimes of the first and second ports to a transmit interval time, and determine that the first port is connected to the network device via a more recently configured link than the second port and is the cause of the network loop when the uptime of the first port is less than the transmit interval time. The network device may determine that the second port is connected to the network device via a less recently configured link than the first port and is not the cause of the network loop when the uptime of the second port is greater than the transmit interval time and disable the first port based on the determination that the first port is connected to the network device via the more recently configured link.

Abstract: Methods for managing non-chatty IoT devices in a network are provided. In one aspect, a method includes receiving classification information identifying that an internet IoT device is connected to a port of a switch and determining that the IoT device has been inactive for a predetermined threshold period of time based on a logoff timer configured for the port. The IoT device is woken up from a power-save mode based on a guaranteed wakeup timer of the IoT device or a Wake-on-LAN packet sent to the IoT device by the switch. The logoff timer is then resent, causing the IoT device to remain in an authenticated state. Systems and machine-readable media are also provided.

Abstract: Implementations of the disclosure are directed to using a distributed ledger network to synchronize configuration changes across a network of servers that provide authentication, authorization, and accounting (AAA). In some implementations, a method includes: receiving, at a first server that provides AAA of users that access a network, a user request to update a configuration of a database of the first server, the database including authentication credentials for users that access the network, in response to receiving the user request, transmitting a transaction to the distributed ledger network for validation, the transaction comprising a request by the first server for each server of the distributed ledger network to update their respective database configuration in accordance with the user request; and after the transaction is validated by the distributed ledger network, the first server updating its database configuration in response to receiving the update comprising the validation of the transaction.

Abstract: According to one aspect of the disclosure, a computing system including at least one networking device with at least one processor and memory. The at least one processor executes instructions stored in the memory to collect data from one or more Internet of Things (IoT) devices via a first communication protocol and provide access to the collected data by one or more user devices via a second and different communication protocol. Further, the one or more IoT devices are communicatively coupled to the at least one networking device to sense the data and transmit the data to the at least one networking device, and the one or more user devices are communicatively coupled to the at least one networking device.

Abstract: In some examples, a network device may determine an uptime of a first port and a second port, compare the uptimes of the first and second ports to a transmit interval time, and determine that the first port is connected to the network device via a more recently configured link than the second port and is the cause of the network loop when the uptime of the first port is less than the transmit interval time. The network device may determine that the second port is connected to the network device via a less recently configured link than the first port and is not the cause of the network loop when the uptime of the second port is greater than the transmit interval time and disable the first port based on the determination that the first port is connected to the network device via the more recently configured link.

Abstract: Methods for managing non-chatty IoT devices in a network are provided. In one aspect, a method includes receiving classification information identifying that an internet IoT device is connected to a port of a switch and determining that the IoT device has been inactive for a predetermined threshold period of time based on a logoff timer configured for the port. The IoT device is woken up from a power-save mode based on a guaranteed wakeup timer of the IoT device or a Wake-on-LAN packet sent to the IoT device by the switch. The logoff timer is then resent, causing the IoT device to remain in an authenticated state. Systems and machine-readable media are also provided.

Abstract: In some examples, a first router includes a communication interface to communicate over a network, and a processor to participate in an election process to determine, based on respective priorities assigned to a plurality of routers including the first router, which of the plurality of routers is an elected router responsible for distributing routing information to another router, and in response to the first router being selected as the elected router in the election process, adjust a priority of the first router for a subsequent election process.

Abstract: In some examples, a maximum transmission unit (MTU) is installed by a Software-Defined Network (SDN) controller on a controlled network node for traffic along a datapath in an SDN. The installed MTU can, for example, be selected from MTU sizes in an MTU database for nodes along the datapath. For example, the installed MTU can be selected as the largest allowable MTU size based on the nodes of the datapath.

Abstract: In some examples, a software-defined network (SDN) controller determines a link aggregation (LAG) configuration for a node in the SDN that is controlled by the SDN controller. The LAG configuration is based on hardware capability information and dynamic network traffic information of the SDN. The SDN controller can further instruct the node to forward traffic in accordance with the LAG configuration.

Abstract: In response to movement of a wireless device, an active tunnel between switches is dynamically included as a member of a virtual network over which the wireless device communicates, where data communicated in the virtual network is carried over the active tunnel, and where the virtual network is overlaid on an underlay physical network that includes the switches and the wireless access points.

Abstract: Methods, systems, and storage mediums that can allow for automatic re-routing of network traffic in software-defined networks. In some examples, instructions can be provided to network switches in a software-defined network to initially route network traffic along a first flow route. The instructions can further instruct the network switches to automatically re-route the network traffic along a second flow route at a later time.

Abstract: In response to movement of a wireless device, an active tunnel between switches is dynamically included as a member of a virtual network over which the wireless device communicates, where data communicated in the virtual network is carried over the active tunnel, and where the virtual network is overlaid on an underlay physical network that includes the switches and the wireless access points.

Abstract: In some examples, a method includes determining, with a Software-Defined Networking (SDN) controller, a network topology for an SDN portion of a heterogeneous network. SDN portion 111 can, for example, be formed by hybrid and SDN devices. The heterogeneous network can, for example, include a non-SDN portion that borders SDN portion 111 and is formed by non-SDN devices. The method can further include sending tunneling instructions to a first hybrid border switch to create a tunnel between the first hybrid border switch and a second hybrid border switch in order to allow Open Shortest Path First (OSPF) routing between two non-SDN portions separated by an SDN portion within the heterogeneous network.

Abstract: In some examples, a maximum transmission unit (MTU) is installed by a Software-Defined Network (SDN) controller on a controlled network node for traffic along a datapath in an SDN. The installed MTU can, for example, be selected from MTU sizes in an MTU database for nodes along the datapath. For example, the installed MTU can be selected as the largest allowable MTU size based on the nodes of the datapath.

Abstract: Example implementations relate to configuring network devices. For example, a network device includes a controller module to receive a link layer discovery protocol (LLDP) message from a second network device in response to determining that connection to a management device has failed. The controller module is to send a second LLDP message to the second device, where information contained is the second LLDP message is routed to the management device by the second device. The controller module is further to receive configuration changes from the management device and connect to the management device based on the configuration changes, where the configuration changes are routed by the second device.

Abstract: In some examples, a software-defined network (SDN) controller determines a link aggregation (LAG) configuration for a node in the SDN that is controlled by the SDN controller. The LAG configuration is based on hardware capability information and dynamic network traffic information of the SDN. The SDN controller can further instruct the node to forward traffic in accordance with the LAG configuration.

Abstract: Methods, systems, and storage mediums that can allow for automatic re-routing of network traffic in software-defined networks. In some examples, instructions can be provided to network switches in a software-defined network to initially route network traffic along a first flow route. The instructions can further instruct the network switches to automatically re-route the network traffic along a second flow route at a later time.

Abstract: In response to movement of a wireless device, an active tunnel between switches is dynamically included as a member of a virtual network over which the wireless device communicates, where data communicated in the virtual network is carried over the active tunnel, and where the virtual network is overlaid on an underlay physical network that includes the switches and the wireless access points.