Back to results
US 10,382,391 B2Granted
Systems and methods for managing network address information
OwnerDonald E. Eastlake, IIIinventor
Life of this patent
Estimating the term…
Abstract
Systems, methods and apparatus for managing network address information. In some embodiments, an appropriate address authority is queried to obtain information useful for address mapping. For example, the address authority may be selected by determining whether an address to be mapped is within one or more blocks of addresses for which the address authority is authoritative. In some further embodiments, address mapping information may be distributed from an address authority to a network device, so that the network device may perform address mapping using locally available information.
Claims20
A method for managing address mapping information and using the address mapping information to filter data frames, the method comprising acts of:
- receiving, by at least one network switch, via one or more network messages from one or more address authorities, trusted address mapping information that maps Open Systems Interconnection (OSI) model Layer 3 addresses in a first set of addresses to OSI model Layer 2 addresses in a second set of addresses different from the first set of addresses;
- storing, by the at least one network switch, the address mapping information in a database, wherein:
- the first set of addresses comprises OSI model Layer 3 addresses allocated to network interfaces that are within one or more virtual local area networks;
- and
- for every OSI model Layer 3 address allocated to at least one network interface that is within at least one virtual local area network of the one or more virtual local area networks, the database comprises information that maps the OSI model Layer 3 address to an OSI model Layer 2 address of the at least one network interface;
- and
- filtering data frames arriving at the at least one network switch, comprising:
- receiving, by the at least one network switch, a data frame to be forwarded;
- examining address information in the received data frame to identify an address that is purportedly allocated to a network interface in a network;
- accessing the address mapping information stored in the database to determine if the address is actually allocated to a network interface in the network;
- and
- selectively forwarding the received data frame based on whether the address is actually allocated to a network interface in the network, wherein the received data frame is forwarded in response to determining that the address is actually allocated to a network interface in the network, and wherein the received data frame is not forwarded in response to determining that the address is not actually allocated to a network interface in the network.
9 more elements
An apparatus comprising a network switch programmed to manage address mapping information and use the address mapping information to filter data frames, the network switch comprising at least one processor programmed to:
- receive, via one or more network messages from one or more address authorities, trusted address mapping information that maps Open Systems Interconnection (OSI) model Layer 3 addresses in a first set of addresses to OSI model Layer 2 addresses in a second set of addresses different from the first set of addresses;
- store the address mapping information in a database, wherein:
- the first set of addresses comprises OSI model Layer 3 addresses allocated to network interfaces that are within one or more virtual local area networks;
- and
- for every OSI model Layer 3 address allocated to at least one network interface that is within at least one virtual local area network of the one or more virtual local area networks, the database comprises information that maps the OSI model Layer 3 address to an OSI model Layer 2 address of the at least one network interface;
- and
- filter data frames arriving at the at least one network switch, wherein the at least one processor is programmed to filter the data frames at least in part by:
- receiving a data frame to be forwarded;
- examining address information in the received data frame to identify an address that is purportedly allocated to a network interface in a network;
- accessing the address mapping information stored in the database to determine if the address is actually allocated to a network interface in the network;
- and
- selectively forwarding the received data frame based on whether the address is actually allocated to a network interface in the network, wherein the received data frame is forwarded in response to determining that the address is actually allocated to a network interface in the network, and wherein the received data frame is not forwarded in response to determining that the address is not actually allocated to a network interface in the network.
9 more elements
At least one non-transitory computer-readable medium having encoded thereon instructions which, when executed, cause at least one processor to perform a method for managing address mapping information and using the address mapping information to filter data frames, the method comprising acts of:
- receiving, by at least one network switch, via one or more network messages from one or more address authorities, trusted address mapping information that maps Open Systems Interconnection (OSI) model Layer 3 addresses in a first set of addresses to OSI model Layer 2 addresses in a second set of addresses different from the first set of addresses;
- storing, by the at least one network switch, the address mapping information in a database, wherein:
- the first set of addresses comprises OSI model Layer 3 addresses allocated to network interfaces that are within one or more virtual local area networks;
- and
- for every OSI model Layer 3 address allocated to at least one network interface that is within at least one virtual local area network of the one or more virtual local area networks, the database comprises information that maps the OSI model Layer 3 address to an OSI model Layer 2 address of the at least one network interface;
- and
- filtering data frames arriving at the at least one network switch, comprising:
- receiving, by the at least one network switch, a data frame to be forwarded;
- examining address information in the received data frame to identify an address that is purportedly allocated to a network interface in a network;
- accessing the address mapping information stored in the database to determine if the address is actually allocated to a network interface in the network;
- and
- selectively forwarding the received data frame based on whether the address is actually allocated to a network interface in the network, wherein the received data frame is forwarded in response to determining that the address is actually allocated to a network interface in the network, and wherein the received data frame is not forwarded in response to determining that the address is not actually allocated to a network interface in the network.
9 more elements
Dependencies are inferred from the claim text.