专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10069765B2 Interface bundles in virtual network devices 有权
公开(公告)号：US10069765B2
公开(公告)日：2018-09-04
申请号：US14660463
申请日：2015-03-17
申请人： Cisco Technology, Inc.
发明人： Michael R. Smith , Jeffrey Y M Wang , Ali Golshan
IPC分类号： H04L12/701 , H04L12/823 , H04L12/939 , H04L12/751 , H04L12/775 , H04L12/713 , H04L12/933 , H04L12/931 , H04L12/935
CPC分类号： H04L49/552 , H04L45/02 , H04L45/583 , H04L45/586 , H04L49/1553 , H04L49/30 , H04L49/354 , H04L49/70
摘要： A virtual network device includes several different virtual network device sub-units, which collectively operate as a single logical network device. An interface bundle includes interfaces in more than one of the different virtual network device sub-units included in the virtual network device. The interface bundle is coupled to a virtual link bundle, which connects the virtual network device to another device. The interface bundle is managed as a single logical interface.

2. 发明申请

US20160308831A1 Method and Apparatus for Best Effort Propagation of Security Group Information 审中-公开
标题翻译：安全组信息最佳努力传播的方法与装置
公开(公告)号：US20160308831A1
公开(公告)日：2016-10-20
申请号：US15195582
申请日：2016-06-28
申请人： Cisco Technology, Inc.
发明人： Michael R. Smith
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L12/56 , H04L29/12018 , H04L45/52 , H04L49/35 , H04L61/10 , H04L63/101 , H04L67/00 , H04L69/22
摘要： A method and system for best effort propagation of security group information is disclosed. The method includes determining if a reserved group identifier is associated with a destination and, if the reserved group identifier is associated with the destination, indicating that a packet received at a network node can be sent to another network node. The packet includes destination information that identifies the destination as a destination of the packet.
摘要翻译：公开了安全组信息的最佳努力传播的方法和系统。该方法包括确定保留组标识符是否与目的地相关联，并且如果保留组标识符与目的地相关联，指示在网络节点处接收的分组可以被发送到另一网络节点。该分组包括将目的地标识为分组的目的地的目的地信息。

3. 发明授权

US09363183B2 Network address translation offload to network infrastructure for service chains in a network environment 有权
标题翻译：网络地址转换卸载到网络环境中服务链的网络基础设施
公开(公告)号：US09363183B2
公开(公告)日：2016-06-07
申请号：US14249636
申请日：2014-04-10
申请人： CISCO TECHNOLOGY, INC.
发明人： Surendra M. Kumar , Paul Quinn , James N. Guichard , Michael R. Smith
IPC分类号： H04L12/803 , H04L29/12 , H04L12/851 , H04L12/54 , H04L12/28
CPC分类号： H04L47/125 , H04L12/28 , H04L12/56 , H04L47/2483 , H04L61/2514
摘要： An example method for network address translation (NAT) offload to network infrastructure for service chains in a network environment is provided and includes receiving a packet at a network infrastructure in a network comprising a plurality of service nodes interconnected through the network infrastructure, each service node executing at least one service function, identifying the packet as belonging to a first flow based on a cookie in a network service header of the packet that indicates a service chain that includes a sequence of service functions to be executed on the packet at the service nodes, determining that a service function in the service chain is to be offloaded from one of the service nodes to the network infrastructure for subsequent packets of the first flow, and executing the offloaded service function at the network infrastructure for subsequent packets of the first flow.
摘要翻译：提供了一种用于网络地址转换（NAT）卸载到网络环境中的服务链的网络基础设施的示例性方法，并且包括在网络中的网络基础设施处接收包括通过网络基础设施互连的多个服务节点的分组，每个服务节点执行至少一个服务功能，基于所述分组的网络服务报头中的cookie来将分组标识为属于第一流的分组，其指示服务链，所述服务链包括将在所述服务节点处对所述分组执行的服务功能序列确定所述服务链中的服务功能将从所述服务节点之一卸载到所述网络基础设施以用于所述第一流的后续分组，以及在所述网络基础设施处执行所述卸载的服务功能以用于所述第一流的后续分组。

4. 发明申请

US20150106896A1 Method and System for Including Network Security Information in a Frame 审中-公开
标题翻译：在网络中包含网络安全信息的方法和系统
公开(公告)号：US20150106896A1
公开(公告)日：2015-04-16
申请号：US14051854
申请日：2013-10-11
申请人： Cisco Technology, Inc.
发明人： Norman W. Finn , Michael R. Smith
IPC分类号： H04L29/06
CPC分类号： H04L63/08 , H04L63/104
摘要： A method and apparatus for including network security information in a frame is disclosed. Network security information is included in a secure portion of overhead of a frame. The network security information is configured to facilitate network security. A network device configured to process a frame is also disclosed. The frame includes frame security information and network security information. The frame security information is configured to facilitate securing a portion of overhead of the frame, and the network security information is located in the secure portion of the overhead of the frame and is configured to facilitate network security.
摘要翻译：公开了一种在网络中包含网络安全信息的方法和装置。网络安全信息被包含在帧的开销的安全部分中。网络安全信息被配置为便于网络安全。还公开了一种被配置为处理帧的网络设备。该帧包括帧安全信息和网络安全信息。帧安全信息被配置为有助于保护帧的开销的一部分，并且网络安全信息位于帧的开销的安全部分中，并且被配置为便于网络安全性。

5. 发明申请

US20140181953A1 Method and Apparatus for Best Effort Propagation of Security Group Information 审中-公开
标题翻译：安全组信息最佳努力传播的方法与装置
公开(公告)号：US20140181953A1
公开(公告)日：2014-06-26
申请号：US14143935
申请日：2013-12-30
申请人： Cisco Technology, Inc
发明人： Michael R. Smith
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L12/56 , H04L29/12018 , H04L45/52 , H04L61/10 , H04L63/101 , H04L69/22
摘要： A method and system for best effort propagation of security group information is disclosed. The method includes determining if a reserved group identifier is associated with a destination and, if the reserved group identifier is associated with the destination, indicating that a packet received at a network node can be sent to another network node. The packet includes destination information that identifies the destination as a destination of the packet.
摘要翻译：公开了安全组信息的最佳努力传播的方法和系统。该方法包括确定保留组标识符是否与目的地相关联，并且如果保留组标识符与目的地相关联，指示在网络节点处接收的分组可以被发送到另一网络节点。该分组包括将目的地标识为分组的目的地的目的地信息。

6. 发明申请

US20140173703A1 Method and Apparatus for Providing Network Security Using Role-Based Access Control 审中-公开
标题翻译：使用基于角色的访问控制提供网络安全的方法和装置
公开(公告)号：US20140173703A1
公开(公告)日：2014-06-19
申请号：US14188227
申请日：2014-02-24
申请人： Cisco Technology, Inc.
发明人： Michael R. Smith
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , G06F21/6218 , H04L12/4645 , H04L12/4675 , H04L45/04 , H04L45/54 , H04L45/7453 , H04L63/08 , H04L63/105 , H04L63/20
摘要： A method and apparatus for providing network security using role-based access control is disclosed. A network device implementing such a method can include, for example, an access control list. Such an access control list includes an access control list entry, which, in turn, includes a user group field. Alternatively, a network device implementing such a method can include, for example, a forwarding table that includes a plurality of forwarding table entries. In such a case, at least one of the forwarding table entries includes a user group field.
摘要翻译：公开了一种使用基于角色的访问控制来提供网络安全性的方法和装置。实现这种方法的网络设备可以包括例如访问控制列表。这样的访问控制列表包括访问控制列表条目，其又包括用户组字段。或者，实现这种方法的网络设备可以包括例如包括多个转发表条目的转发表。在这种情况下，转发表项中的至少一个包括用户组字段。

7. 发明授权

US10547544B2 Network fabric overlay 有权
公开(公告)号：US10547544B2
公开(公告)日：2020-01-28
申请号：US15855703
申请日：2017-12-27
申请人： Cisco Technology, Inc.
发明人： Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC分类号： H04L12/741 , H04L12/46 , H04L12/721 , H04L12/933 , G06F9/455
摘要： Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.

8. 发明授权

US09876715B2 Network fabric overlay 有权
公开(公告)号：US09876715B2
公开(公告)日：2018-01-23
申请号：US14530550
申请日：2014-10-31
申请人： Cisco Technology, Inc.
发明人： Thomas James Edsall , Navindra Yadav , Francisco M. Matus , Kit Chiu Chu , Michael R. Smith , Sameer Merchant , Krishna Doddapaneni , Satyam Sinha
IPC分类号： H04L12/741 , H04L12/46 , H04L12/721 , H04L12/933 , G06F9/455
CPC分类号： H04L45/74 , G06F9/45558 , G06F2009/45595 , H04L12/4633 , H04L45/66 , H04L49/10
摘要： Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.

9. 发明申请

US20160164833A9 METHOD AND APPARATUS FOR BEST EFFORT PROPAGATION OF SECURITY GROUP INFORMATION 审中-公开
标题翻译：用于安全组信息的最佳传播的方法和装置
公开(公告)号：US20160164833A9
公开(公告)日：2016-06-09
申请号：US14143935
申请日：2013-12-30
申请人： Cisco Technology, Inc
发明人： Michael R. Smith
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L12/56 , H04L29/12018 , H04L45/52 , H04L61/10 , H04L63/101 , H04L69/22
摘要： A method and system for best effort propagation of security group information is disclosed. The method includes determining if a reserved group identifier is associated with a destination and, if the reserved group identifier is associated with the destination, indicating that a packet received at a network node can be sent to another network node. The packet includes destination information that identifies the destination as a destination of the packet.
摘要翻译：公开了安全组信息的最佳努力传播的方法和系统。该方法包括确定保留组标识符是否与目的地相关联，并且如果保留组标识符与目的地相关联，指示在网络节点处接收的分组可以被发送到另一网络节点。该分组包括将目的地标识为分组的目的地的目的地信息。

10. 发明授权

US09246799B2 Data plane learning of bi-directional service chains 有权
标题翻译：双向服务链的数据平面学习
公开(公告)号：US09246799B2
公开(公告)日：2016-01-26
申请号：US13891245
申请日：2013-05-10
申请人： Cisco Technology, Inc.
发明人： James Guichard , Paul Quinn , David Ward , Surendra Kumar , Navindra Yadav , Michael R. Smith , Nagaraj A. Bagepalli
IPC分类号： H04L12/28 , H04L12/725
CPC分类号： H04L45/306 , H04L41/0893 , H04L47/2441 , H04L69/22
摘要： Techniques are provided to decouple service chain structure from the underlying network forwarding state and allow for data plane learning of service chain forwarding requirements and any association between services function state requirements and the forward and reverse forwarding paths for a service chain. In a network comprising a plurality of network nodes each configured to apply a service function to traffic that passes through the respective network node, a packet is received at a network node. When the network node determines that the service function it applies is stateful, it updates context information in a network service header of the packet to indicate that the service function applied at the network node is stateful and that traffic for a reverse path matching the classification criteria is to be returned to the network node.
摘要翻译：提供了技术来将服务链结构与底层网络转发状态分离，并允许服务链转发要求的数据平面学习和服务功能状态要求与服务链的前向和后向转发路径之间的任何关联。在包括多个网络节点的网络中，每个网络节点被配置为对通过相应网络节点的业务应用服务功能，在网络节点处接收分组。当网络节点确定其应用的服务功能是有状态时，它更新分组的网络服务报头中的上下文信息，以指示在网络节点处应用的服务功能是有状态的，并且用于与分类标准匹配的反向路径的业务将被返回到网络节点。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式