Abstract: In one embodiment, a device receives a first packet stream and a second packet stream over different paths through a network, wherein each of said sent first and the second packet streams includes a same replicated stream of packets. The apparatus processes packets of the first packet stream when the first packet stream is in an active packet stream, and while buffering and subsequently dropping packets of the second packet stream when the second packet stream is in a non-active state. In response to identifying a difference in a number of packets in the same replicated stream of packets received in the second packet stream compared to in the first packet stream equaling or exceeding a predetermined threshold, the second packet stream becomes in the active state and missing packets are forwarded from the buffered second stream packets.

Abstract: A multi-node virtual switching system (MVSS) may be provided. A virtual supervisor module (VSM) may be configured onto a network device to serve as a single control point for a network. The VSM may virtualize an interconnection of switches within the network as a virtual fabric and allocate a portion of the network switches to a network domain. The allocated portion of network switches may be represented by the VSM as a single virtualized logical switch. The VSM may then manage the network domain from the single control point.

Abstract: A multi-node virtual switching system (MVSS) may be provided. A virtual supervisor module (VSM) may be configured onto a network device to serve as a single control point for a network. The VSM may virtualize an interconnection of switches within the network as a virtual fabric and allocate a portion of the network switches to a network domain. The allocated portion of network switches may be represented by the VSM as a single virtualized logical switch. The VSM may then manage the network domain from the single control point.

Abstract: In certain embodiments, routing multicast traffic includes generating a multicast distribution tree for each mapping of a plurality of mappings. A mapping associates a source with a multicast group. Each multicast group has at least two multicast distribution trees. A frame destined for a first multicast group is received. The first multicast group has a first multicast distribution tree and a second multicast distribution tree. The first multicast distribution tree, but not the second multicast distribution tree, is selected for the frame. The frame is sent over a path designated by the selected multicast distribution tree.

Abstract: In one embodiment, a device receives a first packet stream and a second packet stream over different paths through a network, wherein each of said sent first and the second packet streams includes a same replicated stream of packets. The apparatus processes packets of the first packet stream when the first packet stream is in an active packet stream, and while buffering and subsequently dropping packets of the second packet stream when the second packet stream is in a non-active state. In response to identifying a difference in a number of packets in the same replicated stream of packets received in the second packet stream compared to in the first packet stream equaling or exceeding a predetermined threshold, the second packet stream becomes in the active state and missing packets are forwarded from the buffered second stream packets.

Abstract: Systems, methods, and other embodiments associated with layer two (L2) encryption for data center interconnectivity are described. One example system includes a receive logic to receive an unencrypted L2 switched frame (UL2SF). The UL2SF may include a payload and an L2 header. The example system may also include an encryption logic to selectively encrypt the UL2SF into an encrypted frame if the UL2SF is to be sent through an L2 virtual private network (L2VPN) requiring encryption. The example system may also include a delivery logic that adds a header to the encrypted frame. The header may include data to identify a decryption function to decrypt the encrypted frame and routing information for the encrypted frame. The delivery logic may also provide the encrypted frame to the L2VPN, where the providing includes selectively sending the encrypted frame as one of, a point to point packet, and a multipoint packet.

Abstract: In certain embodiments, routing multicast traffic includes generating a multicast distribution tree for each mapping of a plurality of mappings. A mapping associates a source with a multicast group. Each multicast group has at least two multicast distribution trees. A frame destined for a first multicast group is received. The first multicast group has a first multicast distribution tree and a second multicast distribution tree. The first multicast distribution tree, but not the second multicast distribution tree, is selected for the frame. The frame is sent over a path designated by the selected multicast distribution tree.

Abstract: PortChannel groups are disclosed which include multiple PortChannel links of a PortChannel. Further, the selection of a particular PortChannel group, and possibly a PortChannel link within a selected PortChannel group, for a packet is provided by user-programmable matching of programmed values or rules to data extracted from the packet. In this manner, the forwarding of packets over PortChannel groups can be explicit. Moreover, packets of different flows of a packet session can be caused to be forwarded over a same PortChannel group, possibly leading to a service node for performing one or more applications based on the packets of the flow(s) of a packet session.

Abstract: To send a connection control message associated with a first set of attributes, only a difference of the first set of attributes from a second set of attributes associated with an already active virtual circuit (to a common destination) may be sent (contained in the connection control message). The devices receiving the message may create the necessary configuration for the new virtual circuit by modifying a copy of the configuration of the active virtual circuit. Processing requirements may be minimized as the devices may not need to parse and decode long list of information element. The feature may be particularly important in setting up a virtual circuit for voice calls, as a long list of attributes may be associated with each virtual circuit, but the difference of attributes being only minimal.

Abstract: Systems, methods, and other embodiments associated with layer two (L2) encryption for data center interconnectivity are described. One example system includes a receive logic to receive an unencrypted L2 switched frame (UL2SF). The UL2SF may include a payload and an L2 header. The example system may also include an encryption logic to selectively encrypt the UL2SF into an encrypted frame if the UL2SF is to be sent through an L2 virtual private network (L2VPN) requiring encryption. The example system may also include a delivery logic that adds a header to the encrypted frame. The header may include data to identify a decryption function to decrypt the encrypted frame and routing information for the encrypted frame. The delivery logic may also provide the encrypted frame to the L2VPN, where the providing includes selectively sending the encrypted frame as one of, a point to point packet, and a multipoint packet.

Abstract: Moving a virtual circuit from one port interface to another when multiple port interfaces are present between two network devices. Such a move may be performed, for example, when a port interface fails or when needed to balance the load (e.g., aggregate amount of bandwidth of all virtual circuits presently assigned to a port interface) across multiple port interfaces. As a result, the port interfaces may be used efficiently.

Abstract: An end system (“first end system”) concluding that a bi-directional virtual circuit is operational if the other end system (at the other end of the virtual circuit) has determined that the virtual circuit is operable based on the loopback cells. In other words, the first end system may not send loopback cells, and instead rely on the determination of the other end system. As a result, the total number of loopback cells may be reduced on a network backbone.

Abstract: The services offered (e.g., bandwidth) by a PVC can be changed, potentially as and when desired. An end system (of a PVC) may send a request to initiate a change of a service. Each intermediate system may first determine whether the service change can be supported, and passes the request to the next system in the path until the request is received by the other end system of the PVC. Assuming the other end system also can support the change, an acceptance response is propagated in the reverse direction of the same path. Each system may effect the service change upon receiving the acceptance response.

Abstract: To send a connection control message associated with a first set of attributes, only a difference of the first set of attributes from a second set of attributes associated with an already active virtual circuit (to a common destination) may be sent (contained in the connection control message). The devices receiving the message may create the necessary configuration for the new virtual circuit by modifying a copy of the configuration of the active virtual circuit. Processing requirements may be minimized as the devices may not need to parse and decode long list of information element. The feature may be particularly important in setting up a virtual circuit for voice calls, as a long list of attributes may be associated with each virtual circuit, but the difference of attributes being only minimal.

Abstract: To send a connection control message associated with a first set of attributes, only a difference of the first set of attributes from a second set of attributes associated with an already active virtual circuit (to a common destination) may be sent (contained in the connection control message). The devices receiving the message may create the necessary configuration for the new virtual circuit by modifying a copy of the configuration of the active virtual circuit. Processing requirements may be minimized as the devices may not need to parse and decode long list of information element. The feature may be particularly important in setting up a virtual circuit for voice calls, as a long list of attributes may be associated with each virtual circuit, but the difference of attributes being only minimal.

Abstract: An edge router which associates multiple virtual circuits (e.g., PVCs) with an internet protocol (IP) route. The data transfer load on the IP route is distributed on the virtual circuits. As a result, high aggregate effective bandwidth can be provided between edge routers, potentially without having to use a correspondingly high bandwidth physical connections.

Abstract: An end system (“first end system”) concluding that a bi-directional virtual circuit is operational if the other end system (at the other end of the virtual circuit) has determined that the virtual circuit is operable based on the loopback cells. In other words, the first end system may not send loopback cells, and instead rely on the determination of the other end system. As a result, the total number of loopback cells may be reduced on a network backbone.