For allocating resources in a mesh communications network for setting up a data stream transmission from a talker device to a listener device via at least one node device, data paths being defined throughout the mesh communications network following a link-state routing protocol, each node device performs receiving, obtaining, determining, and checking. And when there are enough said resources, temporarily reserving and propagating. And when receiving for said data stream transmission a stream reservation response representative of a positive acknowledgement to said stream reservation request, effectively allocating and propagating.

Traffic broadcast to a VLAN is restricted. To do so, a plurality of stations are associated with a BSSID (basic service set identifier). A first VLAN is configured by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key. One or more frames addressed to the first VLAN are received. The one or more frames are encrypted with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames. The one or more encrypted VLAN frames are broadcast to the plurality of stations associated with the BSSID.

In general, techniques for facilitating a distributed network (L3) subnet by which multiple independent control planes of network devices connected to physically separate L2 networks provide L2 reachability to/from a single L3 subnet. In some examples, a shared L2 network physically situated to connect a plurality of physically separate L2 networks “stitches” the L2 networks together within the respective, independent control planes of switches such that the control planes bridge L2 traffic for a single bridge domain for the separate L2 networks to the shared L2 network and visa-versa. Each of the independent control planes may be configured with a virtual IRB instance associated with the bridge domain and with a common network subnet. Each of the virtual IRBs provides a functionally similar routing interface for the single bridge domain for the separate L2 networks and allows the shared network subnet to be distributed among the independent control planes.

Techniques are described for automatic provisioning of virtual local area networks (VLANs) on server-facing ports of access switches included in a data center network. Conventionally, VLANs are pre-configured on all server-facing ports of access switches. The techniques described in this disclosure enable automatic provisioning of VLANs on server-facing ports of access switches triggered by traffic received on the ports. The techniques include a feature in a forwarding plane of an access switch that is configured to detect data packets received for an unknown VLAN on a port, and notify a control plane of the access switch of the unknown VLAN on the port. In response to the notification from the forwarding plane, the control plane may authorize and provision the VLAN on the port. The techniques described in this disclosure include hardware-assisted software provisioning of an unknown VLAN on a given port of an access switch.

In one embodiment, a solution is provided wherein redundant routers are treated as a single emulated switch. When a packet is received at a layer 2 edge switch from a host, the layer 2 edge switch may determine a switch identifier for the emulated switch using a destination anycast hardware address contained in the packet. The anycast hardware address may identify an emulated switch comprising a plurality of routers. Then a header may be added to the packet, the header including the switch identifier. Following that, the packet may be forwarded to another layer 2 switch along a shortest path from the layer 2 edge switch to the emulated switch.

Data is received at a buffer used by a protocol processing stack which protocol processes the received data. The received data is made available to, for example, an application, before the protocol processing of the data is complete. If the protocol processing is successful the data made available to the application is committed.

One embodiment of the present invention provides a switching system. The switching system includes a plurality of line cards, each of which includes one or more ports, a processor, one or more switch fabric cards for facilitating switching among the line cards, and a memory storing instructions for facilitating efficient hot-swapping. During operation, the switching system identifies a hot-swapping event of a first switch fabric card based on a data structure indicating the one or more switch fabric cards. The hot-swapping event indicates insertion or removal of the first switch fabric card while the switching system remains in an operational state. The switching system then determines an event type associated with the hot-swapping event and manages the first switch fabric card based on the determined event type.

Aspects of the subject technology relate to systems for arbitrating direct forwarder (“DF”) instantiation between VPC peers used to facilitating the transport of bidirectional multicast traffic over a L2/L3 network boundary. In some aspects, arbitration of DF instantiation on a given VPC peer can include determining a first set of metrics for a first VPC switch, determining a second set of metrics for a second VPC switch, and determining, at the first VPC switch, whether to instantiate a designated forwarder (DF) operation based on a comparison of the first set of metrics and the second set of metrics. Methods and machine-readable media are also provided.

Described herein are various embodiments of a network element comprising a network port to receive a unit of network data and a data plane coupled to the network port. In one embodiment the data plane includes a ternary content addressable memory (TCAM) module to compare a first set of bits in the unit of network data with a second set of bits in a key associated with a TCAM rule. The second set of bits includes a first subset of bits and a second subset of bits and the TCAM module includes first logic to compare one or more bits in the first set of bits against the second set of bits, and second logic to select an action or a result using bits from either the second subset of bits, from the unit of network data, or from meta data associated with the unit of network data. Other embodiments are also described.

Embodiments of the present invention relate to the communications field, and provide a multi-chassis cascading apparatus. The apparatus includes a line card chassis LCC, where a fabric interface chip FIC and a switch element SE 1/3 are deployed in each line card chassis LCC; the fabric interface chip FIC is connected to the switch element SE 1/3 that is located in the same line card chassis LCC as the fabric interface chip FIC is; and a switch element SE 2 is deployed in each line card chassis LCC; the switch element SE 1/3 is connected to the switch element SE 2 that is located in the same line card chassis LCC as the switch element SE 1/3 is; and the switch element SE 1/3 is connected to the switch element SE 2 that is located in another line card chassis LCC.