Abstract: Provided herein are systems and methods for facilitating communication of overlay unicast or multicast packets over an underlay single-area network. A single-area network can have an edge node that receives an overlay packet from a host device, determines whether a unicast or a multicast service is to be provided to the host device, encapsulates the overlay packet into an underlay packet by adding an encapsulation header, and forwards the encapsulated packet to a receiving edge node based on a shortest path. The receiving edge node can de-encapsulate the underlay packet and transmit the overlay packet to a host device.

Abstract: Provided herein are systems and methods for facilitating overlay Internet Protocol (IP) multicast streams over an underlay multi-area network. A multi-area network can have an edge node that receives an overlay packet of a multicast stream from a host device, encapsulates the overlay packet into an underlay packet based on a layer 3 virtual network, and forwards the underlay packet to a set of end nodes based on a created shortest-path forwarding tree. End nodes can de-encapsulate the overlay packet so that it can be forwarded to a set of receiving devices. The multi-area network can also have one or more inter-area routers that reside between neighboring underlay network areas. An inter-area router performs operations related to routing an underlay packet corresponding to an overlay IP multicast stream from one underlay network area to a neighboring underlay network area.

Abstract: Provided herein are systems and methods for facilitating communication of overlay Ethernet frames and IP packets from a set of virtual overlay networks over an underlay multi-area network. A multi-area network can have an edge node that receives an overlay packet from a host device. The edge node determines whether the overlay packet is a unicast packet or a BUM traffic. The edge node encapsulates the overlay packet into an underlay packet by adding an underlay header. The edge node forwards the IP packet to an inter-area router using a shortest path tree.

Abstract: Disclosed herein are system, method, and computer program product aspects for implementing a security group policy. Some aspects of this disclosure relate to a method for applying a security group policy. The method includes receiving a first frame from a source device and assigning a source security group identifier (ID) to the first frame. The method further includes generating a second frame based on the first frame and the source security group ID and identifying a target security group ID for the second frame. The method also includes applying one or more forwarding decisions to the second frame based on the source security group ID and the target security group ID.

Abstract: Disclosed herein are system, method, and computer program product aspects for implementing a security group policy. Some aspects of this disclosure relate to a method for applying a security group policy. The method includes receiving a first frame from a source device and assigning a source security group identifier (ID) to the first frame. The method further includes generating a second frame based on the first frame and the source security group ID and identifying a target security group ID for the second frame. The method also includes applying one or more forwarding decisions to the second frame based on the source security group ID and the target security group ID.

Abstract: Disclosed herein are system, method, and computer program product aspects for implementing anycast gateways. Some aspects of this disclosure relate to a method including receiving, by an access node, a first TLV from a first gateway. The first TLV includes a CMAC address for the first gateway, an IP address of the first gateway, and an L2 I-SID associated with the first gateway. The method further includes receiving, by the access node, a second TLV from a second gateway, where the second TLV includes the CMAC address, the IP address, and the L2 I-SID. The method further includes, in response to determining that the L2 I-SID exists in an LSDB of the access node, determining that the first gateway is closer to the access node than the second gateway. The method also includes storing the CMAC address in a database to point to the first gateway based on the determination.

Abstract: Disclosed herein are system, method, and computer program product aspects for implementing a security group policy. Some aspects of this disclosure relate to a method for applying a security group policy. The method includes receiving a first frame from a source device and assigning a source security group identifier (ID) to the first frame. The method further includes generating a second frame based on the first frame and the source security group ID and identifying a target security group ID for the second frame. The method also includes applying one or more forwarding decisions to the second frame based on the source security group ID and the target security group ID.

Abstract: Methods, systems and computer readable media for providing skill-based, secure and dynamic contact center agent network access are described.

Abstract: Embodiments generally relate to enabling configuration in networks. In one embodiment, a method includes receiving a message from an edge configuration device, wherein the message contains shortest path bridging (SPB) configuration information. The method also includes performing an intermediate system-to-intermediate system (IS-IS) configuration in response to receiving the message.

Abstract: Embodiments generally relate to enabling encapsulation in networks. In one embodiment, a method includes receiving a message from an edge configuration device, wherein the message contains shortest path bridging (SPB) configuration information. The method also includes performing provider backbone bridge (MAC-in-MAC) encapsulation in response to receiving the message.

Abstract: A method, apparatus and computer program product for providing multi-homing techniques for SPB networks is presented. A set of UNI nodes that receive multicast packets are determined based on Backbone Media Access Control-Destination Address (BMAC-DA)/I-Tag Service Identifier (I-SID) of received multicast packets for multicast packets within a transport network. A separate Egress Port Mask is determined for each Backbone-Virtual Local Area Network (B-VLAN) of the transport network, wherein the Egress Port Mask is determined such that only one UNI node of the set of UNI nodes forwards said multicast packets. A set of UNI copies of said multicast packets are filtered out by applying the Egress Port Mask, wherein copies that are not in the Egress Port Mask are dropped. Copies of multicast packets that are not dropped are sent out.

Abstract: A method, apparatus and computer program product for providing Virtual Routing and Forwarding (VRF) and gateway Media Access Controller (MAC) distribution is presented. At least one subnet associated with a Layer 2 Virtual Switching Network (L2VSN) is provided on a network device. A message is propagated to a distributed Datapath. Network devices install the message as a routable MAC address on the L2VSN for the Layer 3 Virtual Switching Network/Virtual Routing and Forwarding (L3VSN/VRF) associated with the message. Edge devices route packets on the L2VSN addressed to the gateway MAC address.

Abstract: A VLAN is implemented with a logical hub and spoke topology that obviates local switching. Member devices are connected to a hub device such as a router via intermediate devices such as Layer 2 switches that support individual IP subnets within the VLAN. The Layer 2 switch does not allow bridging, so there is no IP subnet broadcast domain. Further, the Layer 2 switch implements only a single logical broadcast uplink port which is connected to the router. The Layer 2 switch also implements only point-to-point downlink ports, i.e., to individual member devices. Consequently, all traffic is forced to flow through the router, e.g., broadcast traffic, multicast traffic and traffic of unknown destination received by the Layer 2 switch from a member device is only flooded to the router, and the router performs intra-subnet routing in addition to routing between subnets and between VLANs.

Abstract: Methods, systems and computer readable media for discovering edge devices within a network and establishing connectivity between the edge devices and one or more corresponding network services are described. In some implementations, the method can include snooping a received packet to determine whether a source entity of the received packet is known and to determine whether the received packet can be handled by a first processing layer based on a rule set in the first processing layer and configured to be accessed by the first processing layer. The method can also include classifying the packet at the first processing layer when the packet can be handled by the first processing layer, and forwarding the packet to a second processing layer when the packet cannot be handled by the first processing layer.

Abstract: A method, apparatus and computer program product for providing Virtual Routing and Forwarding (VRF) and gateway Media Access Controller (MAC) distribution is presented. At least one subnet associated with a Layer 2 Virtual Switching Network (L2VSN) is provided on a network device. A message is propagated to a distributed Datapath. Network devices install the message as a routable MAC address on the L2VSN for the Layer 3 Virtual Switching Network/Virtual Routing and Forwarding (L3VSN/VRF) associated with the message. Edge devices route packets on the L2VSN addressed to the gateway MAC address.

Abstract: A VRRP router group can operate in either a standard VRRP mode or a distributed gateway mode in which all VRRP routers generate VRRP control packets but transmit those packets only to local access network-side hosts. The rate of VRRP control packet generation may be decreased in the distributed gateway mode relative to the standard mode. Moreover, VRRP router CPUs may cease processing of VRRP control packets in the distributed gateway mode.

Abstract: A method, apparatus and computer program product for providing Virtual Routing and Forwarding (VRF) and gateway Media Access Controller (MAC) distribution is presented. At least one subnet associated with a Layer 2 Virtual Switching Network (L2VSN) is provided on a network device. A message is propagated to a distributed Datapath. Network devices install the message as a routable MAC address on the L2VSN for the Layer 3 Virtual Switching Network/Virtual Routing and Forwarding (L3VSN/VRF) associated with the message. Edge devices route packets on the L2VSN addressed to the gateway MAC address.

Abstract: Methods, systems and computer readable media for discovering edge devices within a network and establishing connectivity between the edge devices and one or more corresponding network services are described. In some implementations, the method can include snooping a received packet to determine whether a source entity of the received packet is known and to determine whether the received packet can be handled by a first processing layer based on a rule set in the first processing layer and configured to be accessed by the first processing layer. The method can also include classifying the packet at the first processing layer when the packet can be handled by the first processing layer, and forwarding the packet to a second processing layer when the packet cannot be handled by the first processing layer.

Abstract: A method, apparatus and computer program product for providing Virtual Routing and Forwarding (VRF) and gateway Media Access Controller (MAC) distribution is presented. At least one subnet associated with a Layer 2 Virtual Switching Network (L2VSN) is provided on a network device. A message is propagated to a distributed Datapath. Network devices install the message as a routable MAC address on the L2VSN for the Layer 3 Virtual Switching Network/Virtual Routing and Forwarding (L3VSN/VRF) associated with the message. Edge devices route packets on the L2VSN addressed to the gateway MAC address.

Abstract: Methods, systems and computer readable media for providing skill-based, secure and dynamic contact center agent network access are described.