Abstract: A network device within a data communication network includes a plurality of network interfaces, each programmed with a respective set of Address Resolution Protocol (ARP) routing entries for correlating network addresses with physical addresses. Each network interface is further programmed with an additional respective set of Longest Prefix Match (LPM) routing entries for correlating other network addresses with designated network interfaces to enable traffic matching one of the LPM routing entries to be forwarded to the appropriate designated network interface within the network device.

Abstract: A network device within a data communication network includes a plurality of network interfaces, each programmed with a respective set of Address Resolution Protocol (ARP) routing entries for correlating network addresses with physical addresses. Each network interface is further programmed with an additional respective set of Longest Prefix Match (LPM) routing entries for correlating other network addresses with designated network interfaces to enable traffic matching one of the LPM routing entries to be forwarded to the appropriate designated network interface within the network device.

Abstract: A virtual chassis system includes a plurality of network nodes configured with a master virtual chassis address. The network nodes are connected by virtual fabric link (VFLs) that provide a connection for exchange of packets between the network nodes. The packets include source MAC addresses and associated hardware device information, such as source chassis ID, source network interface identifier and source port identifier information. The network nodes use this information to maintain synchronized MAC address tables for forwarding of packets in the virtual chassis system.

Abstract: A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

Abstract: A method of securely routing data traffic between communication networks. In an integrated security device, a host router supports a virtual router that peers with VRF (virtual routing and forwarding) instances associated with participating networks on the host router. Each VRF instance preferably runs its own dynamic routing protocol and determines when received data traffic may be directly forwarded from one network to another and when it must be forwarded to an OE (offload engine) for enforcement of security policies or NAT (network address translation) processing.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and able to communicate via an inter-process communication (IPC) using an IPC Virtual Local Area Network (IPC VLAN). A sub-set of Customer-facing ports (CFPs) of each Aggregation Switch are coupled to the VFL and assigned to the IPC VLAN to enable communication therebetween.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and each coupled to a multi-chassis link aggregate group (MC-LAG), which is assigned to a multi-chassis link aggregate group virtual local area network (MC-LAG VLAN). A virtual Internet Protocol (IP) interface is allocated to the MC-LAG VLAN and configured on both Aggregation Switches.

Abstract: A virtual chassis system includes a plurality of network nodes configured with a master virtual chassis address. The network nodes are connected by virtual fabric link (VFLs) that provide a connection for exchange of packets between the network nodes. The packets include source MAC addresses and associated hardware device information, such as source chassis ID, source network interface identifier and source port identifier information. The network nodes use this information to maintain synchronized MAC address tables for forwarding of packets in the virtual chassis system.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and able to communicate via an inter-process communication (IPC) using an IPC Virtual Local Area Network (IPC VLAN). A sub-set of Customer-facing ports (CFPs) of each Aggregation Switch are coupled to the VFL and assigned to the IPC VLAN to enable communication therebetween.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and each coupled to a multi-chassis link aggregate group (MC-LAG), which is assigned to a multi-chassis link aggregate group virtual local area network (MC-LAG VLAN).

Abstract: A switch and a method are described herein that are capable of performing the following steps: (a) receiving the unicast packet which is a L3 routed packet at a port in a first Virtual Local Area Network (VLAN); (b) routing the received packet to a loopback port in a second VLAN; (c) receiving the routed packet which is now a L2 multicast packet from the loopback port in the second VLAN; and (d) bridging the routed packet to multiple ports in the second VLAN.

Abstract: A switch and a method are described herein that are capable of supporting a “new” IP network tunnel even though the switch has an “old” application specific integrated circuit (ASIC) that did not originally support the routing of a packet with the “new” tunnel type (i.e., the “new” tunnel type was developed and implemented after the design of the “old” ASIC).

Abstract: A switch and a method are described herein that are capable of performing the following steps: (a) receiving the unicast packet which is a L3 routed packet at a port in a first Virtual Local Area Network (VLAN); (b) routing the received packet to a loopback port in a second VLAN; (c) receiving the routed packet which is now a L2 multicast packet from the loopback port in the second VLAN; and (d) bridging the routed packet to multiple ports in the second VLAN.

Abstract: A switch and a method are described herein that are capable of supporting a “new” IP network tunnel even though the switch has an “old” application specific integrated circuit (ASIC) that did not originally support the routing of a packet with the “new” tunnel type (i.e., the “new” tunnel type was developed and implemented after the design of the “old” ASIC).