An integrated system includes a system user interface (SUI) that provides an iconic, at-a-glance representation of integrated security system status. The SUI is for use across all client devices including mobile or cellular telephones, a mobile portal, a web portal, and a touchscreen device. The SUI includes a number of display elements presented across all types of client devices for monitoring status of the integrated security system. The display elements of the SUI include an orb icon, text summary, security button, device warnings, system warnings, interesting sensors, and quiet sensors. The SUI thus provides system status summary information agnostically across all clients. Additionally, the SUI provides consistent iconography, terminology, and display rules across all clients as well as consistent sensor and system detail across clients.

Cross-client sensor user interface in an integrated security network

A novel method for logically routing a packet between a source machine that is in a first logical domain and a destination machine that is in a second logical domain is described. The method configures a managed switching element as a second-level managed switching element. The method configures a router in a host that includes the second-level managed switching element. The method communicatively couples the second-level managed switching element with the router. The method causes the router to route a packet when the router receives a packet from the first logical domain that is addressed to the second logical domain.

Distributed logical l3 routing

In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g, GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

Method and apparatus for implementing and managing virtual switches

Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

Network operating system for managing and securing networks

A method performed by a network element, for notifying a controller of a change to a packet forwarding configuration of the network element. The network element is separated from the controller by a communication channel. The method includes determining the change to the packet forwarding configuration of the network element. The packet forwarding configuration specifies how packets are to be forwarded by the network element. The method also includes actively notifying the controller of the change to the packet forwarding configuration by sending a message to the controller over the communication channel. The message, in addition to indicating the change, also indicates at least one detail about the packet forwarding configuration after the change.

Notifying a Controller of a Change to a Packet Forwarding Configuration of a Network Element Over a Communication Channel

Systems and methods of automatically determining a set of route targets is provided. The method includes receiving network topology data specifying configuration of a network. The method also includes automatically converting the network topology data into route targets to be assigned to virtual routing and forwarding elements. The route targets are grouped into sets and duplicate sets of route targets are removed. The method further includes generating a data record including information related to the set of route targets.

System and method to provision MPLS/VPN network

The present disclosure is generally directed to systems and methods associated with data communications. In a particular embodiment, a method for use of multi-protocol labels switching (MPLS) encapsulation with control word communicated over a distributed computer network is disclosed. The method includes providing MPLS virtual circuit label with the control word associated with a data packet selected from one of a customer data packet and an OAM data packet, and communicating the MPLS packet with control word and the data packet over the distributed computer network. In another embodiment, a method of handling a data packet within a computer network is disclosed. The data packet is either an unknown unicast, multicast, or broadcast packet. The method includes encapsulating the packet into a multi-packet label switching label and a control word, the control word having a source site identity and a multi-cast identity; and distributing the packet to a plurality of sites within the computer network.

Enhanced H-VPLS service architecture using control word

Communication between a source and a destination is dynamically established. A connection request is received. The connection request is based on a request transmitted over a best-effort path from the source. A network connection is established having a specified quality of service (QoS) based on the request between the source and the destination. Data for a first application is transmitted over the network connection and data for a second application is transmitted over the best-effort path.

Extended virtual user-to-network interface with atm network

A method to perform dynamic source selection within an IP multicast network is performed at a designated router of an IP multicast network. At the designated router within the IP multicast network, a first source of a multicast group is selected to be forwarded to a receiving host or multiple receiving hosts. The first source is monitored to automatically detect when the first source exhibits a predetermined characteristic. At the designated router, responsive to the detection that the first source exhibits the predetermined characteristic, a second source of the multicast group is automatically selected to be forwarded to the receiving host or hosts. The method also supports automatic selection of all normally operating sources and forwarding of the traffic of such sources or channels to the receiving hosts or hosts.

Dynamic source selection within an IP multicast network

In an embodiment, a method of allocating media streams includes measuring real-time port usage data related to each of a plurality of physical ports associated with a link aggregation group. The method further includes selecting at least one, but not all, of the plurality of physical ports based on the real-time port usage data and sending a media stream to a network via the physical port.

Kuo-Hui Liu

Papers

System and method to provision MPLS/VPN network

Enhanced H-VPLS service architecture using control word

Extended virtual user-to-network interface with atm network

Dynamic source selection within an IP multicast network

SYSTEM AND METHOD of COMMUNICATING A MEDIA STREAM