KUMAR B MEHTA
Engineering in Cupertino, CA

2013000, Jan 3, 2013

Jun 29, 2011

13/172505

Andrzej Szyszko - Holden MA, US
Apurva Mehta - Cupertino CA, US
Kumar Mehta - Cupertino CA, US
Gopi Krishna - Union City CA, US
Jagadish Grandhi - Mountain View CA, US
Murtuza Attarwala - San Francisco CA, US

JUNIPER NETWORKS, INC. - Sunnyvale CA

H04L 12/56

370392

In general, this disclosure describes techniques for applying, with a network device, subscriber-specific packet processing using an internal processing path that includes service objects that are commonly applied to multiple packet flows associated with multiple subscribers. In one example, a network device control plane creates subscriber records that include, for respective subscribers, one or more variable values that specify service objects as well as an identifier for a packet processing template. A forwarding plane of the network device receives and maps subscriber packets to an associated subscriber record and then processes the packet by executing the packet processing template specified by the subscriber record. When the forwarding plane reaches a variable while executing the specified packet processing template, the forwarding plane reads the associated variable value from the subscriber record to identify and then apply the subscriber-specific service object specified by the variable.

7787480, Aug 31, 2010

Mar 4, 2009

12/397811

Apurva Mehta - Cupertino CA, US
Ramasamy Ramanathan - Santa Clara CA, US
Kumar Mehta - Cupertino CA, US
Sunesh Rustagi - Cupertino CA, US
Sanjiv Doshi - San Jose CA, US
Shiva Shenoy - Los Altos CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04L 12/56

370401, 370419

Methods, apparatus, and products are disclosed for routing frames in a TRILL network using service VLAN identifiers by: receiving a frame from an ingress bridge node for transmission through the TRILL network to a destination node that connects to the TRILL network through an egress node, the received frame including a customer VLAN identifier, a service VLAN identifier uniquely assigned to the ingress bridge node, and a destination node address for the destination node, the received frame not having mac-in-mac encapsulation; adding, in dependence upon the service VLAN identifier and the destination node address, a TRILL header conforming to the TRILL protocol, the TRILL header including an ingress bridge nickname and an egress bridge nickname; and routing, to the egress bridge node through which the destination node connects to the network, the frame in dependence upon the ingress bridge nickname and the egress bridge nickname.

8125928, Feb 28, 2012

Jul 24, 2009

12/508949

Apurva Mehta - Cupertino CA, US
Kumar Mehta - Cupertino CA, US
Ramasamy Ramanathan - Santa Clara CA, US
Krishna Sankaran - Milpitas CA, US
Ramanarayanan Ramakrishnan - San Jose CA, US
Shiva Shenoy - Los Altos CA, US
Gopi Krishna - Tracy CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04L 12/28

370254, 370389, 370401

Methods, apparatus, and products for routing frames in a shortest path computer network for a multi-homed legacy bridge, wherein the network includes a plurality of bridges. At least two of the plurality of bridges operate as edge bridges through which the frames ingress and egress the network. A first edge bridge identifies a legacy bridge nickname for a legacy bridge connected to the network through the first edge bridge and a second edge bridge using active-active link aggregation. The first bridge receives a frame from the legacy bridge and determines, in dependence upon the frame's destination node address, an egress bridge nickname for a third bridge through which a destination node connects to the network. The first bridge then adds the legacy bridge nickname and the egress bridge nickname to the frame and routes the frame to the third bridge in dependence upon the egress bridge nickname.

8199753, Jun 12, 2012

Jun 5, 2009

12/478857

Apurva Mehta - Cupertino CA, US
Kumar Mehta - Cupertino CA, US
Krishna Sankaran - Milpitas CA, US
Rajagopalan Subbiah - San Jose CA, US
Ramanarayanan Ramakrishnan - San Jose CA, US
Bin William Hong - San Jose CA, US
Ananda Sathyanarayana - Santa Clara CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04L 12/28, H04L 12/56

370390, 370392, 370401

Methods, apparatus, and products are disclosed for forwarding frames in a computer network using shortest path bridging (‘SPB’). The network includes multiple bridges, and each edge bridge is assigned a unique service virtual local area network (‘VLAN’) identifier. One of the bridges receives a frame for transmission to a destination node. The received frame includes a service VLAN identifier for the ingress bridge through which the frame entered the network and a customer VLAN identifier. The one bridge identifies an SPB forwarding tree in dependence upon the service VLAN identifier. The SPB forwarding tree specifies a shortest route in the network from the ingress bridge through the one bridge to the other bridges in the network. The one bridge then forwards the received frame to the egress bridge without MAC-in-MAC encapsulation in dependence upon the SPB forwarding tree and the customer VLAN identifier.

8509248, Aug 13, 2013

Dec 29, 2008

12/344644

Apurva Mehta - Cupertino CA, US
Ramasamy Ramanathan - Santa Clara CA, US
Kumar Mehta - Cupertino CA, US
Ramanarayanan Ramakrishnan - San Jose CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04L 12/28, H04J 3/16

370401, 370389, 370392, 370466, 370467

Methods, apparatus, and products for routing frames in a network using bridge identifiers, wherein the network includes a plurality of bridge nodes. At least one of the bridge nodes operates as an ingress bridge node through which frames are received into the network. At least one of the bridge nodes operates as an egress bridge node through which frames are transmitted out of the network. One of the bridge nodes receives, from the ingress bridge node, a frame for transmission to a destination node. The destination node connects to the network through the egress bridge node. The frame includes an ingress bridge identifier and an egress bridge identifier. The bridge that received the frame then routes the frame to the egress bridge node through which the destination node connects to the network in dependence upon the ingress bridge identifier and the egress bridge identifier included in the frame.

7190695, Mar 13, 2007

Sep 28, 2001

09/967563

Marc Schaub - Sunnyvale CA, US
Balakrishnan Ramakrishnan - Sunnyvale CA, US
Kumar Mehta - Cupertino CA, US

Lucent Technologies Inc. - Murray Hill NJ

H04L 12/28

370392, 37039532

Distributing packets from an input link to multiple output links involves categorizing each incoming packet, selecting a mapping algorithm based on the packet category, and using the selected mapping algorithm for each packet to determine an output link for the respective packet. If packets are from a category that requires the order of the packets to be maintained, then the selected mapping algorithm causes packets from the same set of packets to be distributed to the same output link. If packets are from a category that does not require the order of the packets to be maintained, then the selected mapping algorithm can cause packets to be distributed more evenly among the multiple output links. Hashing can be used to distribute in-order packets from the same set to the same output link. Load balancing and round-robin distribution can be used to distribute out-of-order packets more evenly across the output links.

7139926, Nov 21, 2006

Aug 30, 2002

10/233002

Praveen Madhav - Mountain View CA, US
Rama Ramakrishnan - Santa Clara CA, US
Kumar Mehta - Cupertino CA, US
Apurva Mehta - Cupertino CA, US

Lucent Technologies Inc. - Murray Hill NJ

G06F 11/00

714 4, 718105

Failure protection is provided between two routers that are actively implementing load sharing using network address translation. Failure protection is achieved by generating state information at the two routers and then exchanging the state information between the two routers so that each router has a combined set of state information that can be used in the event of a failure of the other router.

7925744, Apr 12, 2011

Aug 8, 2008

12/188769

Sanjiv Doshi - San Jose CA, US
Rajagopalan Subbiah - San Jose CA, US
Apurva Mehta - Cupertino CA, US
Kumar Mehta - Cupertino CA, US

Juniper Networks, Inc. - Sunnyvale CA

G06F 15/173, H04L 12/28, G06F 11/00

709224, 370389, 714 18

A derived state value is calculated based on a plurality of component state values. As any of the plurality of component state values changes, the derived state value is recalculated. When sending information about a MAC address or other data between two components, the derived state value is included in the information sent. An object receiving a MAC address or other data from another object checks the validity of the received derived state value to determine whether to accept the new data and flush old data, to accept the new data, or to ignore the new data.

8520615, Aug 27, 2013

Aug 10, 2010

12/853707

Apurva Mehta - Cupertino CA, US
Kumar Mehta - Cupertino CA, US
Krishna Sankaran - Milpitas CA, US
Sanjiv Doshi - San Jose CA, US
Srinivasa Chaganti - San Ramon CA, US
Bin Hong - San Jose CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04Q 7/00

370329

In general, the invention is directed to techniques for breaking out mobile data traffic from a mobile service provider network to a packet data network. For example, as described herein, a breakout gateway device (BGW) receives a first service request and data traffic for a data session associated with the requested service from a mobile device in a radio access network, wherein the first service request is addressed to a serving node of a mobile core network of the mobile service provider network, and wherein the data traffic is destined for the PDN. A control packet analysis module forwards the first service request from the breakout gateway device to the serving node. A breakout module of the BGW bypasses the serving node by sending the data traffic from the breakout gateway device to the PDN on a data path from the radio access network to the PDN.

8520680, Aug 27, 2013

Apr 30, 2010

12/771451

Sanjiv Doshi - San Jose CA, US
Iswar Biswal - San Jose CA, US
Kumar Mehta - Cupertino CA, US
Jagadish Grandhi - Mountain View CA, US

Juniper Networks, Inc. - Sunnyvale CA

H04L 12/28, H04L 12/56

370392, 370389, 370390, 370391, 37039553, 370397

A network system includes a provider backbone bridged network (PBBN) and a multi-homed provider bridge network (PBN) having an L2 switch that operate as backboned edge bridge (BEBs) to bridge L2 packets between the PBN and the PBBN. The L2 switch executes a PBBN routing instance and a separate PBN routing instance. A plurality of packet-forwarding engine (PFE) of the L2 switch are configured to forward L2 packets between interfaces of the PBN routing instance and the PBBN routing instance. The PFEs store L2 network address tables that specify L2 network addresses reachable by the interfaces. The PFEs of the L2 switch are configured to selectively share L2 network addresses between the L2 network address tables of the PBN routing instance and the L2 network address tables of the PBBN routing instance.