Abstract: A network device within a data communication network includes a plurality of network interfaces, each programmed with a respective set of Address Resolution Protocol (ARP) routing entries for correlating network addresses with physical addresses. Each network interface is further programmed with an additional respective set of Longest Prefix Match (LPM) routing entries for correlating other network addresses with designated network interfaces to enable traffic matching one of the LPM routing entries to be forwarded to the appropriate designated network interface within the network device.

Abstract: A network device within a data communication network includes a plurality of network interfaces, each programmed with a respective set of Address Resolution Protocol (ARP) routing entries for correlating network addresses with physical addresses. Each network interface is further programmed with an additional respective set of Longest Prefix Match (LPM) routing entries for correlating other network addresses with designated network interfaces to enable traffic matching one of the LPM routing entries to be forwarded to the appropriate designated network interface within the network device.

Abstract: A method and apparatus for offloading data traffic routing from one NI (network interface) to another. The NI receives data traffic, and that portion of the data traffic that must be L3 routed is passed to the CPU of the NI though a token bucket meter or equivalent metering device that selectively designates a portion of the routing traffic to another NI for routing. The portion of the traffic designated corresponds to the capacity of the CPU and offloading a portion of the data traffic helps to reduce the number of packets that are discarded when a CPU is overloaded. The threshold for determining when and in what quantity the data traffic should be offloaded is either statically or dynamically set, and in the latter case may be updated automatically when traffic levels and, in some implementations, other considerations require.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and each coupled to a multi-chassis link aggregate group (MC-LAG), which is assigned to a multi-chassis link aggregate group virtual local area network (MC-LAG VLAN). A virtual Internet Protocol (IP) interface is allocated to the MC-LAG VLAN and configured on both Aggregation Switches.

Abstract: A method and apparatus for classifying a port on a node in a data communications network, such as a router. The node, itself or in some embodiments though another network device, determines whether the port in question is currently receiving packets from a single address, for example a MAC address, only. If so, incoming packets of at least a first type are selected for inspection. The inspection criteria may vary with the type or types of packets selected, but in any case the results of the inspection are used to determine whether the single address corresponds with a client device. If so, selective security measures may be applied to the port. If security measures are applied to a port, the port is preferably monitored periodically to ensure that it remains a client port. The frequency of inspections or monitoring may vary depending on the port's classification history.

Abstract: Aggregation Switches connected via a virtual fabric link (VFL) are each active and each coupled to a multi-chassis link aggregate group (MC-LAG), which is assigned to a multi-chassis link aggregate group virtual local area network (MC-LAG VLAN).

Abstract: A method and apparatus for offloading data traffic routing from one NI (network interface) to another. The NI receives data traffic, and that portion of the data traffic that must be L3 routed is passed to the CPU of the NI though a token bucket meter or equivalent metering device that selectively designates a portion of the routing traffic to another NI for routing. The portion of the traffic designated corresponds to the capacity of the CPU and offloading a portion of the data traffic helps to reduce the number of packets that are discarded when a CPU is overloaded. The threshold for determining when and in what quantity the data traffic should be offloaded is either statically or dynamically set, and in the latter case may be updated automatically when traffic levels and, in some implementations, other considerations require.

Abstract: A method and system for offloading data traffic routing from one NI (network interface) to another in a multi-NI platform. When an NI determines that offloading of data traffic should occur, it disables routing at the incoming port or ports on which L3 traffic may be received, and reconfigures an L2 table to indicate that traffic addressed to a router MAC address should not be routed, but instead bridged to the other NI. This bridging is preferably done using an inter-NI link that is dedicated for communication between two or more NIs in the multi-Ni platform. The determination to offload traffic may, in some embodiments, be made as part of an initialization sequence and offloading is used until synchronization of the NI has been completed to a pre-determined point, at which time a determination is made to terminate offloading and routing from the NI is re-enabled.

Abstract: A method and apparatus for classifying a port on a node in a data communications network, such as a router. The node, itself or in some embodiments though another network device, determines whether the port in question is currently receiving packets from a single address, for example a MAC address, only. If so, incoming packets of at least a first type are selected for inspection. The inspection criteria may vary with the type or types of packets selected, but in any case the results of the inspection are used to determine whether the single address corresponds with a client device. If so, selective security measures may be applied to the port. If security measures are applied to a port, the port is preferably monitored periodically to ensure that it remains a client port. The frequency of inspections or monitoring may vary depending on the port's classification history.