Brijesh B Nambiar

8161543, Apr 17, 2012

Dec 22, 2006

11/644098

Brijesh Nambiar - Sunnyvale CA, US

Aruba Networks, Inc. - Sunnyvale CA

H04L 29/06

726 15, 713153, 713162, 713163, 380 29, 380247, 380277, 370230, 370338, 370401

According to one embodiment of the invention, a method for establishing multiple tunnels for each virtual local area network is described. Upon receiving information over a first tunnel associated with a first virtual local area network, a determination is made whether the information is from a network device assigned to a second virtual local area network, which differs from the first virtual local area network. If the network device is a member of the second virtual local area network, a second tunnel associated with the second virtual local area network is created.

8392968, Mar 5, 2013

Mar 22, 2011

13/069221

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

Aruba Networks, Inc. - Sunnyvale CA

G06F 7/04

726 2, 713151

According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and transfer processing of an authentication handshaking protocol. The first state is commenced for establishing a secure communication path by a first processor within a first network device. The first phrase comprises an exchange of data during a networking protocol. The transfer of processing for the networking protocol by the first processor to a second processor is conducted to complete the networking protocol.

20080077972, Mar 27, 2008

Sep 21, 2006

11/525277

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

H04L 9/32

726 2

In some embodiments, an apparatus includes a switch to interface between clients, the switch including an authentication server to perform client authentication for at least one of the clients. Other embodiments are described.

20080092223, Apr 17, 2008

Oct 16, 2006

11/582096

Deepinder Setia - San Ramon CA, US
John Taylor - Tiburon CA, US
Keerti Melkote - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

G06F 15/16
G06F 17/00
G06F 9/00

726 11, 726 13, 726 14

A network device to provide per-user firewall capabilities. The network device identifies a user associated with a received frame and a role of the user. The network device determines the firewall actions to be taken for the frame based on the role of the associated user. The user role may be dynamically changed by an administrator or automatically. A user role may be altered based on the authentication level of the user. The network device provides a system where a customized authentication experience may be provided for each user and services and permissions may be managed on a per-user basis.

20110113244, May 12, 2011

Jul 31, 2006

11/496659

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

H04L 9/32

713168

According to one embodiment of the invention, a network device comprises a first processing element and a second processing element. The first processing element is adapted to handle an authentication handshaking protocol, such as the SSL/TLS Handshake, and upon receipt of a Client Key Exchange message, passes control of the authentication handshaking protocol to the second processing element. The second processing element completes the authentication handshaking protocol.

20120166804, Jun 28, 2012

Mar 9, 2012

13/417054

Brijesh Nambiar - Sunnyvale CA, US

H04L 12/56
H04L 9/32

713171, 370389

According to one embodiment of the invention, a method is described that is directed to sending, by a network device, information over a first tunnel associated with a first virtual local area network. Also, a second tunnel associated with the second virtual local area network is created by the network device if the information is determined to be received from a network device that is a member of the second virtual local area network differing from the first virtual local area network. Herein, the first tunnel and the second tunnel each encapsulates at least data link traffic.

20120291098, Nov 15, 2012

May 13, 2011

13/107743

Ramsundar Janakiraman - Sunnyvale CA, US
Rajesh Mirukula - San Jose CA, US
Brijesh Nambiar - Santa Clara CA, US

G06F 21/00

726 3

Assigning clients to VLANs on a digital network. A client attaching to a digital network through a network device is initially assigned to a first VLAN. This VLAN may have restricted access and is used for authentication. The device snoops DHCP traffic on this first VLAN rewriting DHCP traffic from the client to request a short lease time for the client. A short lease time may be on the order of 30 seconds. The device optionally rewrites DHCP traffic to the client on the first VLAN to assure a short lease time is returned; this rewriting supports DHCP servers which do not issue short leases. Traffic on this first VLAN may be limited to authentication such as captive portals, 802.1x, Kerberos, and the like. If client authentication on the first VLAN does not succeed, when the short lease expires, the client will receive another short lease on the first VLAN. The network device snoops authentication traffic. When authentication succeeds, the device snoops this traffic and derives information such as roles and the target VLAN for the client, saving this information. When the short DHCP lease expires for the client, and the client restarts the DHCP process, the device assigns the client to the target VLAN and all further processing occurs on this target VLAN.

20130179678, Jul 11, 2013

Feb 28, 2013

13/781490

ARUBA NETWORKS, INC. - Sunnyvale CA, US
Brijesh Nambiar - Sunnyvale CA, US

ARUBA NETWORKS, INC. - Sunnyvale CA

H04L 29/06

713151, 726 2

According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and passing control of an authentication handshaking protocol. The first phase is commenced for establishing a secure communication path by a data path processor within a first network device. The first phrase comprises an exchange of data during an authentication handshaking protocol. The passing of control for authentication handshaking protocol by the data path processor to a control path processor is conducted to complete the authentication handshaking protocol.