Abstract: Methods and systems for managing authorized data flows using software defined networking include receiving flow criteria sent from a firewall and extracted from a first data packet, determining whether flow criteria of the first data packet matches an entry in a master data flow list, inserting the flow criteria from the first data packet into the master data flow list on a software defined networking controller, and sending the flow criteria of the first data packet to the router. The router may forward a second data packet associated with the data flow toward a destination based on the validation of the first data packet by the firewall. The flow criteria may not match an entry in a router data flow list on the router and may include at least two of: a source IP address, a destination IP address, a destination port, and a protocol of transmission.

Abstract: Methods and systems for managing authorized data flows using software defined networking include receiving flow criteria sent from a firewall and extracted from a first data packet, determining whether flow criteria of the first data packet matches an entry in a master data flow list, inserting the flow criteria from the first data packet into the master data flow list on a software defined networking controller, and sending the flow criteria of the first data packet to the router. The router may forward a second data packet associated with the data flow toward a destination based on the validation of the first data packet by the firewall. The flow criteria may not match an entry in a router data flow list on the router and may include at least two of: a source IP address, a destination IP address, a destination port, and a protocol of transmission.

Abstract: Managing a partitioned network includes receiving a request to create a user network of a network. The network comprises domains, where a domain comprises one or more groups, and a group comprises one or more network elements. The user network is created. The user network comprises one or more user domains, where a user domain represents a domain to which a user has access.

Abstract: Managing a network involves accessing a network description of a network that includes links. Generation of a network view of the network is initiated according to the network description. One or more candidate links are identified, where a candidate link represents a link that is a candidate for partitioning the network. Graphical identification of the candidate links is initiated.

Abstract: Managing a partitioned network includes receiving a request to create a user network of a network. The network comprises domains, where a domain comprises one or more groups, and a group comprises one or more network elements. The user network is created. The user network comprises one or more user domains, where a user domain represents a domain to which a user has access.