Abstract: A network device may transmit a request to each of a plurality of multi-protocol label switching (MPLS) networks for a label switched path (LSP) label, wherein each LSP label provides a defined quality of service connection through a corresponding MPLS network. The network device may then receive from each of the plurality of MPLS networks a corresponding LSP label and transmit at least one LSP label to each of a plurality of network devices, wherein the defined quality of service connection is provided through each of the plurality of MPLS networks.

Abstract: Some embodiments provide a novel method for forwarding a packet at a managed switching element in a first domain. The method receives a packet from a local machine. The method encapsulates the packet with a first context identifier that identifies a first logical port of a first logical switching element that couples to machines in both the first domain and a second domain. The first logical port maps to a destination address of the packet. Based on a mapping of the first logical port to a second logical port of a second logical switching element that couples to machines in only the first domain, the method encapsulates the packet with a second context identifier that identifies the second logical port. The method transmits the twice-encapsulated packet out of a port of the managed switching element based on the second context identifier.

Abstract: A novel method for logically routing a packet between a source machine that is in a first logical domain and a destination machine that is in a second logical domain is described. The method configures a managed switching element as a second-level managed switching element. The method configures a router in a host that includes the second-level managed switching element. The method communicatively couples the second-level managed switching element with the router. The method causes the router to route a packet when the router receives a packet from the first logical domain that is addressed to the second logical domain.

Abstract: A network device receives a join request on a downstream interface, wherein the join request specifies a source device and multicast group, wherein the network device is positioned within a core network of a multicast virtual private network (MVPN) that transmits multicast traffic between the source device and a plurality of receivers associated with customer sites. The network device selects an upstream router to which to send the join request from among a plurality of upstream routers on paths leading to the source device, so as to avoid creating a join request loop in the core network. At least one of the upstream routers is positioned on an Exterior Border Gateway Protocol (EBGP) path toward the source device, and at least one of the upstream routers is positioned on an Interior BGP (IBGP) path toward the source device. The network device sends the join request to the selected upstream device.

Abstract: This disclosure describes techniques for supporting an and Multi-Protocol Label Switching (MPLS)-based Virutal Private Network (VPN) service that provides layer two (L2) connectivity between the customer edge device. In particular, the techniques support a Border Gateway (BGP) MPLS-based MAC VPNs (“MAC-VPN” or “MAC VPN”). The techniques provide a MAC VPN in which L2 MAC address learning occurs in the control plane via inter-device BGP signaling in the control plane rather than the data plane, in response to VPN traffic, as may be typical with other VPN technologies.

Abstract: Systems and methods for hierarchical link aggregation are disclosed. A system for hierarchical link aggregation may include a network interface having a plurality of physical ports. A first plurality of the physical ports may be configured as member ports of a first link aggregation group (LAG). A second plurality of the physical ports may be configured as member ports of a second LAG. The first LAG and second LAG may be configured as member logical ports of a third LAG.

Abstract: In one embodiment, a system includes a switching processor configured to execute logic, a plurality of ports, at least some of the ports being grouped together in one or more link aggregations (LAGs), logic adapted to create at least a first virtual local area network (VLAN) interface for Ethernet traffic using transmission control protocol/internet protocol (TCP/IP) that is received on at least one of the plurality of ports, and logic adapted to create at least a second VLAN for storage area network (SAN) traffic using Fiber Channel over Ethernet (FCoE) and/or remote direct access memory (RDMA) over Converged Enhanced Ethernet (RoCEE) that is received on at least one of the plurality of ports, wherein no SAN traffic using FCoE and/or RoCEE is assigned to the first VLAN, and wherein no Ethernet traffic using TCP/IP is assigned to the second VLAN.

Abstract: A system and method for bypassing an access point in a wireless Local Area Network (LAN) for direct point-to-point data transfers are provided. A user device in the wireless LAN is equipped with a primary local wireless interface establishing a wireless communication link with an access point of the wireless LAN, a secondary local wireless interface used for direct point-to-point (P2P) file transfers, and a P2P file transfer application. When the P2P application desires to transfer a data file to another user device within the wireless LAN, the user device determines whether the other user device is within a coverage area of the secondary local wireless interface and whether the file transfer meets one or more alternate transfer criterion. If so, the data file is transferred to the other user device via a direct P2P wireless communication link, thereby bypassing the access point of the wireless LAN.

Abstract: A method, a device, and a network system of establishing a tunnel are provided in embodiments of the present disclosure. The method of establishing the tunnel includes: obtaining, by a WTP, an address of an AC and an address of a BRAS from a DHCP server; using, by the WTP, the address of the AC to establish a CAPWAP control tunnel with the AC; and using, by the WTP, the address of the BRAS to establish a CAPWAP data tunnel with the BRAS. By using the technical scheme provided in the embodiments of the present disclosure, the CAPWAP data tunnel may be established between the WTP and the BRAS.

Abstract: Methods and apparatus for managing packets in a packet switched network include, in at least one aspect, a device including: an input to receive a packet from one of a plurality of network devices, the plurality of network devices configured to communicate with one or more others of the network devices using a plurality of packets; and circuitry configured to control packet switching of the plurality of packets, at least one packet including: a switch tag including a tag portion embedded with switching information and an extended tag portion embedded with additional switching information, the switching information and the additional switching information configured to control a switching pattern associated with the at least one packet.

Abstract: In a system and method for establishing communications in a communications network, a network service provider can assign IP addresses to mobile devices dynamically to conserve IP address resources. A network service provider can also implement network address translation to further conserve IP address resources and to provide improved security. If a requestor seeks to obtain an IP address of a mobile device and the address is a local address, the system determines if the mobile device has a network address translation (NAT) binding that associates the IP address of the mobile device with a public IP address. If the mobile device does not have a NAT binding, the system creates a NAT binding that associates the IP address of the mobile device with a public IP address.

Abstract: A system for generating and sending a Logical Node identification signal as part of a data stream is disclosed. The system also includes subscriber stations capable of receiving and extracting Logical Node identification information from a data stream. The subscriber stations create new messages including the Logical Node identification signal and send the message to the transmission network system control, such that switching of data streams to an appropriate channel over the information transmission network is done consistent with the network topology.

Abstract: A system and method are provided for providing access communications between customer locations and a core network service edge. Access flows are handled as carrier-tagged flows through a packet switched network comprising network elements that interpret and manipulate carrier tag values associated with traffic-bearing data frames.

Abstract: A system and method is provided for managing access communications between the service edge of a communications service provider and a customer. Access communications are carried in the form of carrier-tagged flows, the communications traffic being appended with carrier tags having significance to handling of the traffic through access network elements. A building aggregation system is provided which couples to customer premise equipment and interfaces customer flows to carrier-tagged flows used in the access network.

Abstract: Embodiments of the invention provide a secure method for enabling the provisioning of a shared service in a utility computing environment. One embodiment establishes an account primary virtual local area network (VLAN) for at least one account in a utility computing environment. Then, a request is received from a service provider to provide a shared service to the at least one account. An isolated VLAN is established for each shared service being provisioned in the context of the account primary VLAN and a promiscuous port is provided for the service provider. A selection option is then provided to allow the at least one server to utilize the shared service provided by the service provider. An isolated port is then configured for the at least one server on an isolated VLAN between the at least one server that chooses to utilize the shared service, and the shared service.

Abstract: The communication management device includes a logical-ring configuring unit that determines a transmission order of a token frame in a network and configures a logical ring; a multicast-address generating unit that generates a multicast address from a MAC address of the communication management device; a multicast-address notifying unit that notifies a slave station configuring the logical ring of the multicast address; and a token-frame processing unit and a data-frame-communication processing unit that transmit a frame having a destination address to which the multicast address is set, and not performing a receiving process of a frame when a destination address of the received frame does not coincide with the multicast address.

Abstract: Disclosed are a unified method and apparatus to classify, route, and process injected data packets into a network so as to belong to a plurality of logical networks, each implementing a specific flow of data on top of a common physical network. The method allows to locally identify collectives of packets for local processing, such as the computation of the sum, difference, maximum, minimum, or other logical operations among the identified packet collective. Packets are injected together with a class-attribute and an opcode attribute. Network routers, employing the described method, use the packet attributes to look-up the class-specific route information from a local route table, which contains the local incoming and outgoing directions as part of the specifically implemented global data flow of the particular virtual network.

Abstract: A communication can be conducted between a hub network layer-3VPN-connected to a core network and a hub network layer-2VPN connected to the core network. A first NW that conducts a packet forwarding of a VPN, a second NW that is layer-3-connected to the first NW, and a third NW that is layer-2-connected to the first NW configure VPN. When a packet is transmitted from the second NW to a destination of the third NW, a packet forwarding processing by a layer is conducted, and information is stored in destination information of the packet and forwarded by using destination information and information on the network device PE belonging to the first NW which is connected to the third NW which is a relay point to the destination.

Abstract: In one embodiment, a list of border node next hop options is maintained in a memory. The list of border node next hop options includes one or more of border nodes that may be utilized to reach one or more prefixes. An index value is associated with each border node of the list of border node next hop options. A list of labels is also maintained in the memory. The index value of each border node is associated with a corresponding label for a path to reach that border node. When a change to the one or more border nodes is detected, the list of border node next hop options is updated to remove a border node. However, a label for the path to reach the border node is maintained in the list of labels for at least a period of time.

Abstract: A control plane of a logical network device creates a service link aggregation group and adds one port from each member network device to the service link aggregation group. The logical network device includes member network devices and each port connects the logical network device to the same neighbor device. When a port of the logical network device receives a message with an unknown source address, the control plane determines if the receiving port is in any service link aggregation group. After determining the receiving port is in the service link aggregation group, the control plane configures a data plane of the logical network device with mappings between the address and the ports in the service link aggregation group.

Abstract: A method for communication includes, in a sender node that sends packets to a receiver node over a physical link, making a decision, for a packet that is associated with a respective virtual link selected from among multiple virtual links, whether the receiver node is to buffer the packet in a dedicated buffer assigned to the respective virtual link or in a shared buffer that is shared among the multiple virtual links. The packet is sent, and the decision is signaled, from the sender node to the receiver node.

Abstract: One embodiment of the present invention provides a switch. The switch includes a link aggregation database and a packet processor. The link aggregation database stores configuration information regarding a plurality of switches participating in a multi-chassis trunk. The plurality of switches includes the switch. The packet processor constructs a packet for a remote switch. This packet is forwardable via a logical connection. The packet includes a virtual circuit label associated with a second logical connection of a second switch. The plurality of switches includes the second switch as well.

Abstract: A switching network includes an upper tier including a master switch and a lower tier including a plurality of lower tier entities. The master switch includes a plurality of ports each coupled to a respective one of the plurality of lower tier entities. Each of the plurality of ports includes a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier entity coupled to that port. Each of the plurality of ports also includes a receive interface that, responsive to receipt of data traffic from a particular lower tier entity among the plurality of lower tier entities, queues the data traffic to the virtual port among the plurality of virtual ports that corresponds to the RPI on the particular lower tier entity that was the source of the data traffic.

Abstract: Some embodiments provide a distributed control system for controlling managed switching elements of a network. The distributed control system comprises a first controller for converting a first set of input logical control plane data to a first set of output logical forwarding plane data. It also includes a second controller for converting a second set of input logical control plane data to a second set of output logical forwarding plane data. The logical forwarding plane data is translated into physical forwarding behaviors that direct the forwarding of data by the managed switching elements.

Abstract: A network controller for managing a set of interconnection switching elements that connect segmented networks to a shared physical interconnection network. The network controller includes i) an interface for receiving a logical control plane definition of a logical switching element that couples to a set of network segments at different segmented networks; ii) a control application for translating the logical control plane definition of the logical switching element into a first set of flow entries in a logical forwarding plane; and iii) a virtualization application for translating the first set of flow entries into a second set of flow entries in a physical control plane. The flow entries in the physical control plane are for subsequent conversion by the managed interconnection switching elements into a third set of flow entries in a physical forwarding plane that directs the forwarding of network data by the managed interconnection switching elements.

Abstract: In a network relay router 10, a multicast routing protocol processing module 11A sequentially sends a join request message (CP1) to a router 30a functioning as a rendezvous point via an interface 101, based on the settings of a multicast group address or destination address and a sender VRF name. The network relay router 10 receives a multicast packet (DP1) from the router 30a via the interface 101 and acquires a sender address or source address of a transmission device SE from the received multicast packet. The network relay router 10 sends a join request message (CP2) via an interface 102 on the side of the transmission device SE and receives a multicast packet via the interface 102. This establishes an optimum multicast route (MR) between the transmission device SE and the network relay router 10.

Abstract: In some embodiments, the invention involves information routing in networks, and, more specifically, to defining a framework using swarm intelligence and utilization of the defined framework for routing information in the network, especially for cloud computing applications. In an embodiment, information about available information/services is pushed to network nodes using information packets (ants). Nodes requiring services send query packets (ants) and a node may send a response to a query ant when information is available. Ants may be forwarded throughout the network based on popularity of nodes, freshness of information/requests, routing table information, and requests or interest by consumer nodes captured in information routing table. Other embodiments are described and claimed.

Abstract: Some embodiments provide a network virtualization apparatus for managing a plurality of managed switching elements that forward data in a network. The network virtualization apparatus comprises a controller for converting logical control plane data to logical forwarding plane data. It also includes a virtualizer for converting the logical forwarding plane data to physical control plane data. In some embodiments, the physical control plane data is subsequently translated into physical forwarding plane data that direct the forwarding of data by the managed switching elements.

Abstract: Some embodiments provide a network virtualizer for managing several managed switching elements that forward data in a network. The virtualizer includes an interface for receiving input logical forwarding plane data. It also includes a converter for converting the input logical forwarding plane data to output physical control plane data. In some embodiments, the physical control plane data is translation into physical forwarding plane data that direct the forwarding of data by the managed switching elements.

Abstract: In a system for providing an IPTV service, if a multicast address of an IPTV channel received from a head-end is a multicast address requested by a mobile node through a tunnel, an end router confirms a care of address (CoA) of the mobile node corresponding to the multicast address of the IPTV channel, sets the multicast address in the first header of broadcasting traffic, sets the CoA of the mobile node in the second header of the broadcasting traffic, and then sends the broadcasting traffic.

Abstract: A method and a system for monitoring and controlling remote devices are described. The system has a gateway, a web server, and a client device. The gateway is coupled to a security device. The web server has a management application configured to communicate with the gateway. The management application has a service manager module to enable additional services from the gateway and the security device. The client device communicates with the gateway identified by the web server. The gateway aggregates monitoring data from the security device and from other security devices respectively coupled to other gateways correlated with the gateway. The client device receives the aggregated monitoring data, controls the security device coupled to the respective gateway from a web-based user interface at the client device.

Abstract: According to one embodiment, a method may include assigning a virtual local area network (VLAN) ingress connection identifier (iXid) to a frame upon ingress. The method may also include classifying a traffic flow for which the frame is a part through ingress engines of the network element based on the iXid. The method may further include swapping the iXid for an egress connection identifier (eXid) in the frame. The method may additionally include policing or shaping the traffic flow based on at least one of the iXid and the eXid. Moreover, the method may include classifying the traffic flow through egress engines of the network element based on the eXid.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for generating GTP encapsulated RTP packets in an LTE node simulator. According to one method, and LTE node simulator uses a first processing unit to generate prepackaged headers for RTP payloads. The first processing unit communicates the prepackaged headers to a second processing unit separate from the first processing unit within the LTE node simulator. The second processing unit assembles GTP packets by combining the prepackaged headers with the RTP payloads. The second processing unit transmits the GTP packets to a device under test.

Abstract: A cluster compute server comprises a fabric interconnect, a first node coupled to the fabric interconnect and comprising a network interface controller coupleable to an external network, and a second node coupled to the fabric interconnect and comprising a fabric interface to provide a set of one or more virtual network interface controllers representing the network interface controller of the first node. The one or more virtual network interface controllers each appear as a local network interface controller to software executed at the second node. The first node is to emulate one or more link aggregation partners for the set of one or more virtual network interface controllers.

Abstract: The invention includes a method and apparatus for distributing flooding labels within a Multiprotocol Label Switching (MPLS) infrastructure supporting Border Gateway Protocol (BGP) Media Access Control (MAC) Virtual Private Networking (VPN).

Abstract: A data center network system and a packet forwarding method thereof are provided. The data center network system includes a virtual bridge and an address resolution protocol (ARP) server. The virtual bridge intercepts an ARP request having an identification field and a destination IP address field and adds a corresponding virtual data center identification to the identification field of the ARP request and redirecting the ARP request to the ARP server. Additionally, the ARP server queries a corresponding MAC address according to an IP address recorded in the destination IP address field of the ARP request and the corresponding VDCID recorded in the identification field of the ARP request, and transmits the corresponding MAC address in response to the ARP request. Accordingly, the same private IP address can be reused in the data center network system.

Abstract: A system to manage data congestion in a computer network may include network devices to route data packets throughout the network. The system may also include a source node that sends data packets to any of the network devices. The system may further include a routing table at each network device that is updated by the source node, and the route the data packets are sent by any network device is based upon each respective routing table.

Abstract: In accordance with an embodiment, a data processing system includes a processor, a memory, and an interface port configured to be coupled to a hardware network interface device. The processor is configured to run a process that maps network switching functions of each of a plurality of virtual machines to the hardware network interface device.

Abstract: A control application of some embodiments allows a user to enable a logical switching element for Quality of Service (QoS). QoS in some embodiments is a technique to apply to a particular logical port of a logical switching element such that the switching element can guarantee a certain level of performance to network data that a machine sends through the particular logical port. The control application of some embodiments receives user inputs that specify a particular logical switch to enable for QoS. The control application may additionally receive performance constraints data. The control application in some embodiments formats the user inputs into logical control plane data. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify QoS functions.

Abstract: A method to manage data congestion in a computer network may include network devices to route data packets throughout the network. The method may also include a source node that sends data packets to any of the network devices. The method may further include a routing table at each network device that is updated by the source node, and the route the data packets are sent by any network device is based upon each respective routing table.

Abstract: Techniques are disclosed for providing fast convergence on Autonomous System Border Routers (ASBRs). In an embodiment, an ASBR receives first Virtual Private Network (VPN) route information including a first route target, a first route distinguisher, and a first network prefix and second VPN route information including a second route target, a second route distinguisher and a second network prefix. The second route distinguisher received by the ASBR is different than the first route distinguisher. The ASBR compares the first route target to the second route target and the first network prefix with the second network prefix. In response to determining that the first route target matches the second route target and the first network prefix matches the second network prefix, the ASBR associates, in a routing table, a first path based on the first VPN route information with a second path based on the second VPN route information.

Abstract: Some embodiments provide a method for managing several managed switching elements in a network. The method determines configurations for the several managed switching elements to implement a first logical data path set. Based on the determined configurations, the method configures a first set of the several managed switching elements to implement the first logical data path set. The method configures a second set of the several managed switching elements to implement a second logical data path set.

Abstract: Some embodiments provide a controller for managing a plurality of managed switching elements that forward data through a network. The controller comprising a first set of tables for storing input logical control plane data, and a second set of tables for storing output logical forwarding plane data. It also includes a table mapping engine for mapping the input logical control plane data in the first set of tables to output logical forwarding plane data in the second set of tables by performing a set of database join operations on the input logical control plane data in the first set of tables. The logical forwarding plane data is subsequently translated into physical forwarding behaviors that direct the forwarding of data by the managed switching elements.

Abstract: Some embodiments provide a controller for managing several managed switching elements that forward data in a network. The controller includes an interface for receiving input logical control plane data. It also includes a converter for converting the input logical control plane data to output logical forwarding plane data. The logical forwarding plane data for subsequent translation into a set of physical forwarding behaviors that direct the forwarding of data by the managed switching elements.

Abstract: In one embodiment, a method includes establishing in a Virtual Private Local Area Network (LAN) Service (VPLS) over Multi-Protocol Label Switching (MPLS) network a floating pseudowire between a first provider edge router and a redundancy group having a plurality of provider edge routers each configured to forward data toward a external device. Each provider edge router in the redundancy group is configured to maintain an active link to the external device. A provider edge router that is not a member of the redundancy group sends data directed to the external device through the floating pseudowire. Only one provider edge router in the redundancy group receives and forwards the particular data to the external device.

Abstract: A first relay server stores a first routing target address and a second routing target address. The first relay server stores a first routing target address and a virtual address allocated to the first routing target address while being correlated with each other. The first relay server allocates the virtual address to the first routing target address. The first relay server sets whether communication is conducted using the virtual address or the first routing target address with respect to each second relay server. The first relay server transmits the virtual address allocated to the first routing target address to the second relay server, and receives the second routing target address from the second relay server, so as to establish a routing session with the second relay server. The first relay server performs routing control based on the exchanged routing target address.

Abstract: Techniques are provided to start a virtual service node that is configured to provide network traffic services for one or more virtual machines. The virtual service node has at least one associated service profile comprising identifiers for corresponding service policies for network traffic services. The service policies identified in the at least one associated service profile are retrieved. A virtual machine is started with an associated virtual interface and a port profile is applied to the virtual interface, including information identifying the service profile. Information is provided to the virtual service node that informs the virtual service node of network parameters and assigned service profile of the virtual machine. Network traffic associated with the virtual machine is intercepted and redirected to the virtual service node. A virtual service data path is provided that enables dynamic service binding, virtual machine mobility support, and virtual service node chaining and/or clustering.

Abstract: Methods and systems for selectively processing VLAN traffic from different networks while allowing flexible VLAN identifier assignment are disclosed. According to one aspect, a layer 2 switch includes a virtual switch identifier data structure that associates a VLAN identifier extracted from a layer 2 frame and a port identifier corresponding to a port on which a frame is received with a virtual switch identifier. The virtual switch identifier is used to select a per-virtual-switch data structure, such as a forwarding table. The per-virtual-switch data structure is used to control processing of the layer 2 frame on a per-virtual-switch basis. The per-virtual-switch data structure may also be updated separately from the data structures assigned to other virtual switches.

Abstract: A data center network system and a packet forwarding method are provided. The data center network includes a management server and a plurality of machines containing physical machines and virtual machines. The management server configures a logical media access control (MAC) address for each of the machines, wherein most significant bytes of each of the logical MAC addresses are set as 0. When a data packet is about to be sent from a physical machine, the physical machine executes an encapsulation procedure on the data packet for forwarding the data packet to an intermediate node between a transmitter and a receiver of the data packet, and the intermediate node executes a decapsulation procedure on the data packet for forwarding the data packet to the true receiver. Accordingly, the number of virtual machines exposed to the forwarding table of Ethernet switches can be effectively reduced.

Abstract: Some embodiments provide a virtualizer for managing a plurality of managed switching elements that forward data through a network. The virtualizer comprises a first set of tables for storing input logical forwarding plane data and a second set of tables for storing output physical control plane data. It also includes a table mapping engine for mapping the input logical forwarding plane data in the first set of tables to output physical control plane data in the second set of tables by performing a set of database join operations on the input logical forwarding plane data in the first set of tables. In some embodiments, the physical control plane data is subsequently translated into physical forwarding behaviors that direct the forwarding of data by the managed switching elements.