IoT device management using multi-protocol infrastructure network devices
Granted: August 18, 2020
Patent Number:
10750560
Techniques for managing IoT devices through multi-protocol infrastructure network devices are disclosed. A system utilizing such techniques can include a multi-protocol infrastructure network device and a WAN based IoT device management system and various network device based engines. A method utilizing such techniques can include management according to WAN based IoT device policies and LAN based IoT device policies.
Configuration of rules in a network visibility system
Granted: August 18, 2020
Patent Number:
10750387
Aspects of the present disclosure enable a router controller to maintain a default rules table indicating allocation of internet protocol (IP) addresses (of general packet radio service (GPRS) tunneling protocol (GTP) packets) to respective output ports. In an embodiment, the router controller receives information indicating the respective tunnel endpoint IP addresses of a control session and a data session. The router controller is configured to determine whether such IP addresses of…
Device and related method for dynamic traffic mirroring
Granted: August 4, 2020
Patent Number:
10735511
A function is provided in a network system for the dynamic mirroring of network traffic for a variety of purposes including the identification of characteristics of the traffic. Multiple criteria are established for when, what and where to mirror the traffic. The criteria include what frames of traffic to mirror, what portions of the selected frames to mirror, one or more portals through which to minor the selected frames, a destination for the mirroring and the establishment of a mirror…
Private simultaneous authentication of equals
Granted: August 4, 2020
Patent Number:
10735405
Systems and methods for performing network-side Simultaneous Authentication of Equals (SAE) to allow an end user device to access a network. A passphrase is assigned to an end user device for use in authenticating the end user device for a network using SAE. An identification of the end user device is determined during an authentication process. The passphrase assigned to the end user device is determined at a network side using the identification of the end user device. A shared secret…
Layer 7 application classification
Granted: August 4, 2020
Patent Number:
10735351
Maintaining layer 7 state as a client device roams between network devices during a session. Data packets used in executing a layer 7 application are received at a first network device that a client device is coupled to during a session. Data packets received by the first network device are stored in a layer 7 application buffer that is sent to a second network device that a client device roams to during a session. A layer 7 application buffer is used to classify a layer 7 application…
Single band dual concurrent network device
Granted: August 4, 2020
Patent Number:
10734738
A network device comprising, a first radio module configured to transmit and receive first radio signals in a first frequency band, a first antenna array configured to transmit and receive the first radio signals for the first radio module in the first frequency band, a second radio module configured to transmit and receive second radio signals in the first frequency band, a second antenna array configured to transmit and receive the second radio signals for the second radio module in…
Ruled-based network traffic interception and distribution scheme
Granted: July 28, 2020
Patent Number:
10728176
Using a hash function, an L2/L3 switch can produce an FID for a data packet. The L2/L3 switch can select, from among potentially several stored VLAN flooding tables, a particular VLAN flooding table that is associated with a particular VLAN on which the data packet is to be carried. The rows of the particular VLAN flooding table can specify different combinations of the particular VLAN's egress ports. The L2/L3 switch can locate, in the particular VLAN flooding table, a particular row…
Intelligent sorting for N-way secure split tunnel
Granted: June 30, 2020
Patent Number:
10701034
A method of intelligently sorting packets/datagrams for sending through appropriate branches of a N-way split VPN tunnel according to embodiments of the present invention allow for efficient movement of network traffic to and from a remote network location. Intelligent sorting may be based on a wide range of criteria in order to implement different policies. For example, datagrams may be sorted for sending through the branches of a 3-way split tunnel so that all traffic from a remote…
Predictive roaming between subnets
Granted: June 30, 2020
Patent Number:
10700892
A network device of a subnet determines predictive roaming information for a wireless client. Predictive roaming information can identify the wireless client and a home network subnet of the wireless client. The network device provides predictive roaming information associated with a wireless client to neighboring subnets. Neighboring subnets store received predictive roaming information, and use the predictive roaming information if the wireless client roams to them.
Network device based proximity beacon locating
Granted: June 23, 2020
Patent Number:
10694319
A proximity beacon signal transmitted by a network device-coupled proximity beacon transmitter is received at a network device. A RSSI reporting message is generated at the network device based on the proximity beacon signal. A position of the network device-coupled proximity beacon transmitter with respect to the network device is determined using the RSSI reporting message. A location of the network device within a region is determined using the RSSI reporting message and network…
Single band dual concurrent network device
Granted: June 23, 2020
Patent Number:
10693243
A network device comprising, a first radio module configured to transmit and receive first radio signals in a first frequency band, a first antenna array configured to transmit and receive the first radio signals for the first radio module in the first frequency band, a second radio module configured to transmit and receive second radio signals in the first frequency band, a second antenna array configured to transmit and receive the second radio signals for the second radio module in…
Ingress gateway selection for a shortest path bridging network to support inter domain multicast routing
Granted: June 9, 2020
Patent Number:
10680931
In a Shortest Path Bridge (SPB) network comprising a plurality of backbone edge bridges (BEBs), a gateway controller of the SPB network, establishes a link using Multicast Source Discovery Protocol (MSDP) with an external network domain; discovers via the link a source of a multicast stream originating outside of the SPB network; and determines a subset of the plurality of BEBs that are able to receive the multicast stream from the source. Once that occurs, the gateway controller selects…
mDNS support in unified access networks
Granted: June 9, 2020
Patent Number:
10680885
Methods, systems and computer readable media for mDNS support in unified access networks are described.
Methods, systems, and computer readable media for advanced distribution in a link aggregation group
Granted: June 2, 2020
Patent Number:
10673744
The subject matter described herein includes methods, systems, and computer readable media for advanced distribution in a link aggregation group (LAG). In some examples, a packet forwarding device includes physical ports for sending and receiving network traffic. The packet forwarding device includes one or more packet processors configured to perform LAG distribution by distributing incoming packets across active links of a first LAG formed between the packet forwarding device and one…
Method for intelligent multi-hop overlay routing
Granted: May 26, 2020
Patent Number:
10666548
Systems and methods are presented herewith for selecting a preferred route for routing a packet from a first network node to a second network node. A set of possible routes is maintained, with each route having am associated weight value. A random subset of routes is then selected based on the weight values. Each route of the subset is then probed to determine its gain value. The preferred route is selected based on the gain values (e.g., by selecting the highest gain value). Then, all…
Forwarding table management
Granted: May 19, 2020
Patent Number:
10659363
Disclosed herein are system, method, and computer program product embodiments for representing a forwarding information base (FIB) in a database. An embodiment operates by determining that a first routing prefix of a first forwarding entry in the FIB is a less specific routing prefix than a second routing prefix in a second forwarding entry in the FIB. The embodiment determines that a first next hop of the first routing prefix is equal to a second next hop of the second routing prefix.…
Access network dual path connectivity
Granted: March 17, 2020
Patent Number:
10594512
A transport network employs dual homing to an access network to provide connectivity from multiple network switches. Dual homing is a mechanism by which an access network employs pair of switches in the transport network as if it were connecting to a single device. Conventional arrangements for defining multiple paths from a transport network to an access network suffer from the shortcomings of potential routing loops, increased hops to the access network, and inability or inconsistency…
Network discovery optimization using supplemental information published by devices
Granted: March 10, 2020
Patent Number:
10587475
Methods, systems and computer readable media for optimizing (or improving) network discovery using supplemental information published by devices and available on their neighbor devices are described. In some implementations, the method can include obtaining, at a network management computer system, a list of one or more seed devices. The method can also include retrieving a device identifier of a corresponding seed device from the list of one or more seed devices. The method can further…
Smart filter generator
Granted: February 18, 2020
Patent Number:
10567259
Techniques for implementing a smart filter generator in a visibility network are provided. In one set of embodiments, the smart filter generator can maintain at least one mapping between (1) a first-order parameter found in network traffic replicated from a core network monitored by the visibility network, and (2) a second-order parameter related to the first-order parameter, where the second-order parameter is not found in the network traffic replicated from the core network. The smart…
Configuration of load-sharing components of a network visibility router in a network visibility system
Granted: January 7, 2020
Patent Number:
10530688
A network visibility system includes a packet router and a router controller. The router controller programs respective forwarding rules in each of a set of load-sharing components of the packet router. Each load-sharing component in the set is designed to forward communication packets according to the respective programmed packet-forwarding rules. The router controller receives, from the packet router, information indicating an update to the availability status of components in the set…
