Sean W Wang

Author:

Sean Wang

ISBN #:

3540669973

US Patent:

7539154, May 26, 2009

Filed:

Oct 17, 2000

Appl. No.:

09/691419

Inventors:

Gordon MacKay - Santa Clara CA, US
James P. Rivers - Saratoga CA, US
Rita Ousterhout - Palo Alto CA, US
Sean X. Wang - Fremont CA, US
John K. Chen - Sunnyvale CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 12/28
H04B 3/36

US Classification:

370256, 370254, 370352, 370389, 370402, 370455, 370216, 370293, 370501

Abstract:

In a system having a plurality of nodes such as Ethernet repeaters, coupled by communication links such as cables, systems and protocols are provided for detecting and/or breaking loops. In one aspect, in response to an added link, a repeater sends a “detect loop” message containing its address to at least one neighbor. Each repeater which receives the “detect loop” message, in turn, sends it to its own neighbor, with the lesser of the received address and its own address. A repeater which receives a “detect loop” message containing its own address declares itself a master loop breaker and can isolate one of its ports to break the loop. In one aspect, a previously intentionally-isolated port can be re-activated, e. g. , in response to the loss of a communication link which could potentially isolate one or more nodes.

US Patent:

20130254871, Sep 26, 2013

Filed:

Mar 22, 2013

Appl. No.:

13/849315

Inventors:

Yi Sun - San Jose CA, US
Meng Xu - Los Altos CA, US
Lee Cheung - Foster City CA, US
Sean Wang - Santa Clara CA, US

International Classification:

H04L 29/06

US Classification:

726 12, 726 11

Abstract:

A method and apparatus is disclosed herein for distributed zone-based security. In one embodiment, the method comprises: determining an ingress security zone associated with an ingress of a first network device based on a first key and a media access control (MAC) address of a source of a packet; determining an egress security zone of a second network device based on a MAC address of a destination for the packet and a second key; performing a policy lookup based on the ingress security zone and the egress security zone to identify a policy to apply to the packet; and applying the policy to the packet.