Utilizing user-specified access control lists in conjunction with redirection and load-balancing on a port
AssigneeCisco Technology, Inc.
InventorsSamar Sharma, Mouli Vytla, Rajendra Kumar Thirumurthi, Puneet Kumar
Life of this patent
Estimating the term…
Abstract
In one embodiment a packet of data is received at a network element. At least one field is parsed from the packet of data. A forwarding entry is identified from a plurality of forwarding entries based on the at least one field. The forwarding entry of the plurality of forwarding entries is formed by merging information from at least one load balancing entry and at least one access control list (ACL) entry. The data packet is forwarded through a port of the network element in accordance with the identified forwarding entry.
Claims20
A method comprising:
- storing, at a network element, a plurality of merged forwarding entries, a merged forwarding entry formed by merging information from at least one load balancing entry and at least one access control list (ACL) entry;
- receiving, at the network element, a packet of data after the plurality of merged forwarding entries are stored;
- parsing at least one field from the packet of data;
- identifying a merged forwarding entry from the plurality of merged forwarding entries based on the at least one field;
- and
- forwarding the packet of data through a port of the network element in accordance with the identified merged forwarding entry.
An apparatus comprising:
- at least one memory element to store a plurality of merged forwarding entries, a merged forwarding entry of the plurality of merged forwarding entries formed by merging at least one load balancing entry and at least one access control list (ACL) entry;
- and
- forwarding logic to:
- receive a packet of data after the plurality of forwarding entries are stored in the at least one memory element;
- parse at least one field from the packet of data;
- identify a merged forwarding entry from the plurality of merged forwarding entries based on the at least one field;
- and
- forward the packet of data in accordance with the identified merged forwarding entry.
A computer-readable non-transitory medium comprising one or more instructions that when executed by a processor configure the processor to cause programmable logic to perform operations comprising:
- storing, at a network element, a plurality of merged forwarding entries, a merged forwarding entry formed by merging information from at least one load balancing entry and at least one access control list (ACL) entry;
- receiving, at the network element, a packet of data after the plurality of merged forwarding entries are stored;
- parsing at least one field from the packet of data;
- identifying a merged forwarding entry from the plurality of merged forwarding entries based on the at least one field;
- and
- forwarding the packet of data through a port of the network element in accordance with the identified merged forwarding entry.
Dependencies are inferred from the claim text.