Abstract: Network services can be dynamically configured on an integrated data path by establishing control paths between data plane entities located on the integrated data path and service entities associated with the network services. In this way, routing for the integrated data path is performed with fewer restrictions than traditional data planes, which are largely limited by the relative locations of pre-configured network nodes in the service network. As a result, the integrated data path may traverse a shorter or more favorable route over the services network, thereby achieving improved service network performance, lower latency periods, less congestion, etc. Further, a service topology on the integrated data path can be dynamically re-configured through the addition, removal, or reordering of data plane entities on the integrated data path.

Abstract: A system and method includes a first switching device that includes a first control unit with a first and third port coupled to the first control unit and a second switching device that includes a second control unit with the a second port coupled to the second control unit. The system and method may include a network link coupling the first and second switching devices. The first control unit configured to receive a data packet and adding a drop indication. The second control unit configured to detect the drop indication. In some embodiments the first control unit is configured to apply a rule, and mark a data packet with a drop indication in a header, the header being a header normally attached to the data packet. The second switching device may interpret the drop indication with a set of rules to determine a course of action.

Abstract: A software defined network service (SDNS) node for altering a logical flow of data packets in a network to accommodate predetermined ordered service chains, comprising a receiver configured to receive an encapsulated data packet comprising a tag via a encapsulated tunnel from another SDNS node, wherein the tag identifies an ordered service chain or a next hop in the ordered service chain, a processor coupled to the receiver and configured to decapsulate the encapsulated data packet, and a transmitter coupled to the processor and configured to forward the decapsulated data packet to a service device attached to the SDNS node when the processor determines, based on the tag, that a service on the service device should be applied to the data packet.

Abstract: Embodiments of the present invention facilitate access to an information handling system, such as a port extender, from a remote information handling device, such as a controlling bridge. According to embodiments of the invention, a port extender, responsive to receiving a request from a controlling bridge for console access to the port extender, submits one or more instructions to a MUX to switch control of a UART from a host CPU of the port extender to a protocol extension message processor residing on the port extender, and switches control by the MUX of the UART to the processor according to the one or more instructions.

Abstract: Network services can be dynamically configured on an integrated data path by establishing control paths between data plane entities located on the integrated data path and service entities associated with the network services. In this way, routing for the integrated data path is performed with fewer restrictions than traditional data planes, which are largely limited by the relative locations of pre-configured network nodes in the service network. As a result, the integrated data path may traverse a shorter or more favorable route over the services network, thereby achieving improved service network performance, lower latency periods, less congestion, etc. Further, a service topology on the integrated data path can be dynamically re-configured through the addition, removal, or reordering of data plane entities on the integrated data path.

Abstract: A port monitoring system includes a first extending device. The first extending device includes a monitored port and a networking port. The first extending device is configured to detect a first packet at the monitored port and, in response, generate a mirrored packet. Then the first extending device adds a monitoring identifier to the mirrored packet and forwards the mirrored packet through the networking port. The port monitoring system also includes a networking device that is coupled to the first extending device. The networking device is configured to receive the mirrored packet from the first extending device and determine that the mirrored packet is associated with a monitoring port using the monitoring identifier provided by the mirrored packet. The networking device then forwards the mirrored packet to the monitoring port.

Abstract: Network services can be dynamically configured on an integrated data path by establishing control paths between data plane entities located on the integrated data path and service entities associated with the network services. In this way, routing for the integrated data path is performed with fewer restrictions than traditional data planes, which are largely limited by the relative locations of pre-configured network nodes in the service network. As a result, the integrated data path may traverse a shorter or more favorable route over the services network, thereby achieving improved service network performance, lower latency periods, less congestion, etc. Further, a service topology on the integrated data path can be dynamically re-configured through the addition, removal, or reordering of data plane entities on the integrated data path.

Abstract: A method implemented in an edge router, the method comprising receiving an authentication request from a device, forwarding the authentication request to an authentication and policy server, receiving an authentication response and an indication of a device tag from the authentication and policy server, wherein the device tag is based on a characteristic of the device, a location, a destination, or a user of the device, forwarding the authentication response to the device, receiving a policy associated with the device tag from the authentication and policy server, receiving a packet from the device, embedding the device tag in the packet to form a tagged packet, and executing the policy.

Abstract: A system and method includes a first switching device that includes a first control unit with a first and third port coupled to the first control unit and a second switching device that includes a second control unit with the a second port coupled to the second control unit. The system and method may include a network link coupling the first and second switching devices. The first control unit configured to receive a data packet and adding a drop indication. The second control unit configured to detect the drop indication. In some embodiments the first control unit is configured to apply a rule, and mark a data packet with a drop indication in a header, the header being a header normally attached to the data packet. The second switching device may interpret the drop indication with a set of rules to determine a course of action.

Abstract: Embodiments of the present invention facilitate access to an information handling system, such as a port extender, from a remote information handling device, such as a controlling bridge. According to embodiments of the invention, a port extender, responsive to receiving a request from a controlling bridge for console access to the port extender, submits one or more instructions to a MUX to switch control of a UART from a host CPU of the port extender to a protocol extension message processor residing on the port extender, and switches control by the MUX of the UART to the processor according to the one or more instructions.

Abstract: A method implemented in an edge router, the method comprising receiving an authentication request from a device, forwarding the authentication request to an authentication and policy server, receiving an authentication response and an indication of a device tag from the authentication and policy server, wherein the device tag is based on a characteristic of the device, a location, a destination, or a user of the device, forwarding the authentication response to the device, receiving a policy associated with the device tag from the authentication and policy server, receiving a packet from the device, embedding the device tag in the packet to form a tagged packet, and executing the policy.

Abstract: A method for controlling access to a Cloud, comprising receiving traffic from an Enterprise user at a gateway, wherein the traffic carries a first key specific to the Enterprise user for use internal to the gateway, replacing the first key with a second key, wherein the second key is a Cloud-negotiated key generic to a plurality of Enterprise users which permits access to the Cloud, and sending traffic to the Cloud.

Abstract: A software defined network service (SDNS) node for altering a logical flow of data packets in a network to accommodate predetermined ordered service chains, comprising a receiver configured to receive an encapsulated data packet comprising a tag via a encapsulated tunnel from another SDNS node, wherein the tag identifies an ordered service chain or a next hop in the ordered service chain, a processor coupled to the receiver and configured to decapsulate the encapsulated data packet, and a transmitter coupled to the processor and configured to forward the decapsulated data packet to a service device attached to the SDNS node when the processor determines, based on the tag, that a service on the service device should be applied to the data packet.

Abstract: A software defined network service (SDNS) node for altering a logical flow of data packets in a network to accommodate predetermined ordered service chains, comprising a receiver configured to receive an encapsulated data packet comprising a tag via a encapsulated tunnel from another SDNS node, wherein the tag identifies an ordered service chain or a next hop in the ordered service chain, a processor coupled to the receiver and configured to decapsulate the encapsulated data packet, and a transmitter coupled to the processor and configured to forward the decapsulated data packet to a service device attached to the SDNS node when the processor determines, based on the tag, that a service on the service device should be applied to the data packet.

Abstract: The bit-rate of surveillance video streams can be adapted by varying the number of enhancement layers/streams that are transmitted to a local monitoring center and/or data storage center. Enhancement layers that are not transmitted to the local data/monitoring center may be sent to a remote storage location, thereby allowing users to reproduce a high quality version of the surveillance video by retrieving those enhancement layers from the remote storage location. The base and enhancement layers may be obtained by encoding the surveillance video in accordance with a scalable video coding format, such as the H.264/MPEG-4 Advanced video coding (AVC) codec.

Abstract: Network services can be dynamically configured on an integrated data path by establishing control paths between data plane entities located on the integrated data path and service entities associated with the network services. In this way, routing for the integrated data path is performed with fewer restrictions than traditional data planes, which are largely limited by the relative locations of pre-configured network nodes in the service network. As a result, the integrated data path may traverse a shorter or more favorable route over the services network, thereby achieving improved service network performance, lower latency periods, less congestion, etc. Further, a service topology on the integrated data path can be dynamically re-configured through the addition, removal, or reordering of data plane entities on the integrated data path.

Abstract: A method for populating location wiremap databases. In particular implementations, a method includes establishing a link layer connection with a client on a switch port, where the switch port is associated with a port identifier and is mapped to a location; identifying one or more connection attributes of the connection, where the connection attributes comprise a network layer address of the client; and transmitting the port identifier and the network layer address of the client to a location server.

Abstract: An apparatus for the transmission of management and/or control traffic in a network, comprising a memory configured to store a first record of management and/or control data from a previous interval, and a processor coupled to the memory, wherein the processor is configured to retrieve the first record, receive a second record of the network management and/or control data for a current interval, and generate a differential of the first and second records.

Abstract: In one embodiment, detecting a host device on a port of a forwarder switch in a network, detecting a movement of the host device from a first forwarder switch to a second forwarder switch, and multicast broadcasting an updated device information for the host device to a convergence group switches and a proximity group switches, where the convergence group switches includes switches in the network that are not configured as forwarder switches, and the proximity group switches include forwarder switches grouped together based on radio proximity is provided.

Abstract: Techniques are provided for securely storing data files in, or retrieving data files from, cloud storage. A data file transmitted to cloud storage from a client in an enterprise computing environment is intercepted by at least one network device. Using security information received from a management server, the data file is converted into an encrypted object configured to remain encrypted while at rest in the cloud storage.