Abstract: Methods, network controllers, and machine-readable and executable instructions are provided for network controller provisioned MACsec keys. A network controller can provision a first network device with a media access control security (MACsec) key for a MACsec flow. The network controller can provision a second network device with the MACsec key for the MACsec flow.

Abstract: Applying an MSTP configuration can include instructing a plurality of network devices to disable non-MSTP links in response to a verification of receipt of the MSTP configuration and instructing the plurality of network devices to apply the MSTP configuration in response to a verification that each of the plurality of network devices disabled the non-MSTP links.

Abstract: Applying an MSTP configuration can include instructing a plurality of network devices to disable non-MSTP links in response to a verification of receipt of the MSTP configuration and instructing the plurality of network devices to apply the MSTP configuration in response to a verification that each of the plurality of network devices disabled the non-MSTP links.

Abstract: Methods and devices are provided for memory management. One embodiment includes creating a memory control block including a number of sub-blocks, where the number of sub-blocks are capable of storing at least one data structure in a memory device. The method also includes scanning the control block for a free-able data structure having a defined data structure property, marking the free-able data structure as free-able in a bit map, and de-allocating the free-able data structure.

Abstract: Emulating virtual local area networks (VLAN)s using media access control security (MACsec) can include a network controller to provision a first client device of a plurality of client devices within a network with a MACsec key associated with a MACsec flow. The network controller can provision a second client device with the MACsec key associated with the MACsec flow to emulate a VLAN with secure communication between the first and the second client devices.

Abstract: Methods, network controllers, and machine-readable and executable instructions are provided for network controller provisioned MACsec keys. A network controller can provision a first network device with a media access control security (MACsec) key for a for a MACsec flow. The network controller can provision a second network device with the MACsec key for the MACsec flow.

Abstract: One embodiment relates to a method of automated multiple-instance spanning tree reconfiguration. Query packets are sent to switches within an multiple-instance spanning tree (MST) region, and response packets are received from the switches with traffic utilization data for ports of the switches. An MST reconfiguration is determined. The MST reconfiguration is propagated to the switches within the MST region. Other embodiments and features are also disclosed.

Abstract: One embodiment disclosed relates to a method of connection-rate filtering. A rate of traffic through a port of a network device is measured. The measured traffic rate is compared with a pre-set threshold rate. Packets are sampled from the port over a period of time if the pre-set threshold rate is exceeded by the measured traffic rate, and the sampled packets are analyzed. Other embodiments are also disclosed.

Abstract: One embodiment relates to a method of connection-rate filtering by a network device. Address resolution protocol (ARP) request packets received from a sub-network are monitored, and a copy of the received ARP request packets are sent to an agent program. The agent program determines a rate of ARP request packets sent by a host in the sub-network. Other embodiments are also disclosed.

Abstract: A method for packet forwarding using a tag in a mesh network is described herein. A packet is received on a non-mesh port of a first mesh network device of the mesh network. One or more available paths between the first mesh network device and a second mesh network device are determined. A path of the one or more available paths is selected based on an egress forwarding rule associated with the path. A tag associated with the selected path is inserted into the packet. The packet is forwarded along the selected path.

Abstract: One embodiment relates to a network device configured with many-to-one connection-rate monitoring. The network device includes sampling circuitry configured to sample packets from a port and a software-implemented agent. The agent is configured to receive the sampled packets and to determine a number of distinct sources for each destination in the sampled packets. Another embodiment relates to a method of many-to-one connection-rate monitoring. A rate of traffic at a port of a network device is measured, and the measured traffic rate is compared with a pre-set threshold rate. If the pre-set threshold rate is exceeded by the measured traffic rate, then packets from the port are sampled over a period of time. The sampled packets are analyzed to detect a high rate of connections to a single destination. Other embodiments, aspects and features are also disclosed herein.

Abstract: In a packet-based switch, a method for managing data flow between the switch and other switches that are interconnected in a mesh network. The method includes receiving at the switch a topology inform packet sent from a first switch of the other switches. The topology inform packet includes at least an identifier of the first switch. The method also includes updating a link state database associated with the first switch. The link state database is configured for storing topology data pertaining to the mesh network. The method further includes forwarding the topology inform packet to at least another switch of the other switches to enable at least another switch to update a link state database associated with at least another switch.

Abstract: One embodiment relates to a network device configured with many-to-one connection-rate monitoring. The network device includes sampling circuitry configured to sample packets from a port and a software-implemented agent. The agent is configured to receive the sampled packets and to determine a number of distinct sources for each destination in the sampled packets. Another embodiment relates to a method of many-to-one connection-rate monitoring. A rate of traffic at a port of a network device is measured, and the measured traffic rate is compared with a pre-set threshold rate. If the pre-set threshold rate is exceeded by the measured traffic rate, then packets from the port are sampled over a period of time. The sampled packets are analyzed to detect a high rate of connections to a single destination. Other embodiments, aspects and features are also disclosed herein.

Abstract: Methods, systems, and devices are provided for load sharing among network devices. One embodiment includes a network device having router functionality, including a processor, memory in communication with the processor, and executable instructions stored in memory and executable on the processor to provide router functionality redundancy for another network device having router functionality, and provide a load sharing functionality between the network devices when both devices are operational.

Abstract: Methods and devices are provided for memory management. One embodiment includes creating a memory control block including a number of sub-blocks, where the number of sub-blocks are capable of storing at least one data structure in a memory device. The method also includes scanning the control block for a free-able data structure having a defined data structure property, marking the free-able data structure as free-able in a bit map, and de-allocating the free-able data structure.

Abstract: One embodiment relates to a method of automated multiple-instance spanning tree reconfiguration. Query packets are sent to switches within an multiple-instance spanning tree (MST) region, and response packets are received from the switches with traffic utilization data for ports of the switches. An MST reconfiguration is determined. The MST reconfiguration is propagated to the switches within the MST region. Other embodiments and features are also disclosed.