Abstract: A technique non-disruptively recovers from a processor failure in a multi-processor flow device, such as an intermediate network node of a computer network. Data relating to a particular data flow of a processor within the node is tagged with specific information used to detect and recover from a failure of the processor without affecting data from other processors of the node. A data path management device tags the data with the specific information reflecting the processor issuing the data and a state of the processor. When the tagged data subsequently passes through the data path management device, the specific information is compared with current information for the issuing processor. If the comparison indicates that the specific information is valid, the data path management device forwards the related data flow through the node. If the comparison indicates that the specific information is invalid, the data and its related data flow are discarded and “cleanly” purged from the node.

Abstract: Network access to a port is secured by monitoring the source address of packets that are sent as a device tries to train to the port over the network. If the source address matches an authorized source address assigned to the port to which the device is attached, then the device is allowed access to the system. If the device tries to train with a source address different from the authorized address, then the device is not allowed to train into the network, and all packets sent by the device are denoted as errored packets to prevent them from being accepted by any other device in the network. The system also detects when a device tries to disguise itself by first training with an authorized source address and then sends a packet with an unauthorized source address. If a packet is received which contains a source address other than the one that the device is authorized to use, the packet is marked as invalid so that it is not accepted by any other device in the network.