Brijesh Nambiar

8161543, Apr 17, 2012

Dec 22, 2006

11/644098

Brijesh Nambiar - Sunnyvale CA, US

Aruba Networks, Inc. - Sunnyvale CA

H04L 29/06

726 15, 713153, 713162, 713163, 380 29, 380247, 380277, 370230, 370338, 370401

According to one embodiment of the invention, a method for establishing multiple tunnels for each virtual local area network is described. Upon receiving information over a first tunnel associated with a first virtual local area network, a determination is made whether the information is from a network device assigned to a second virtual local area network, which differs from the first virtual local area network. If the network device is a member of the second virtual local area network, a second tunnel associated with the second virtual local area network is created.

8392968, Mar 5, 2013

Mar 22, 2011

13/069221

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

Aruba Networks, Inc. - Sunnyvale CA

G06F 7/04

726 2, 713151

According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and transfer processing of an authentication handshaking protocol. The first state is commenced for establishing a secure communication path by a first processor within a first network device. The first phrase comprises an exchange of data during a networking protocol. The transfer of processing for the networking protocol by the first processor to a second processor is conducted to complete the networking protocol.

20080077972, Mar 27, 2008

Sep 21, 2006

11/525277

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

H04L 9/32

726 2

In some embodiments, an apparatus includes a switch to interface between clients, the switch including an authentication server to perform client authentication for at least one of the clients. Other embodiments are described.

20110113244, May 12, 2011

Jul 31, 2006

11/496659

Randy Chou - San Jose CA, US
Brijesh Nambiar - Sunnyvale CA, US

H04L 9/32

713168

According to one embodiment of the invention, a network device comprises a first processing element and a second processing element. The first processing element is adapted to handle an authentication handshaking protocol, such as the SSL/TLS Handshake, and upon receipt of a Client Key Exchange message, passes control of the authentication handshaking protocol to the second processing element. The second processing element completes the authentication handshaking protocol.

20120166804, Jun 28, 2012

Mar 9, 2012

13/417054

Brijesh Nambiar - Sunnyvale CA, US

H04L 12/56
H04L 9/32

713171, 370389

According to one embodiment of the invention, a method is described that is directed to sending, by a network device, information over a first tunnel associated with a first virtual local area network. Also, a second tunnel associated with the second virtual local area network is created by the network device if the information is determined to be received from a network device that is a member of the second virtual local area network differing from the first virtual local area network. Herein, the first tunnel and the second tunnel each encapsulates at least data link traffic.

20120291098, Nov 15, 2012

May 13, 2011

13/107743

Ramsundar Janakiraman - Sunnyvale CA, US
Rajesh Mirukula - San Jose CA, US
Brijesh Nambiar - Santa Clara CA, US

G06F 21/00

726 3

Assigning clients to VLANs on a digital network. A client attaching to a digital network through a network device is initially assigned to a first VLAN. This VLAN may have restricted access and is used for authentication. The device snoops DHCP traffic on this first VLAN rewriting DHCP traffic from the client to request a short lease time for the client. A short lease time may be on the order of 30 seconds. The device optionally rewrites DHCP traffic to the client on the first VLAN to assure a short lease time is returned; this rewriting supports DHCP servers which do not issue short leases. Traffic on this first VLAN may be limited to authentication such as captive portals, 802.1x, Kerberos, and the like. If client authentication on the first VLAN does not succeed, when the short lease expires, the client will receive another short lease on the first VLAN. The network device snoops authentication traffic. When authentication succeeds, the device snoops this traffic and derives information such as roles and the target VLAN for the client, saving this information. When the short DHCP lease expires for the client, and the client restarts the DHCP process, the device assigns the client to the target VLAN and all further processing occurs on this target VLAN.

20130179678, Jul 11, 2013

Feb 28, 2013

13/781490

ARUBA NETWORKS, INC. - Sunnyvale CA, US
Brijesh Nambiar - Sunnyvale CA, US

ARUBA NETWORKS, INC. - Sunnyvale CA

H04L 29/06

713151, 726 2

According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and passing control of an authentication handshaking protocol. The first phase is commenced for establishing a secure communication path by a data path processor within a first network device. The first phrase comprises an exchange of data during an authentication handshaking protocol. The passing of control for authentication handshaking protocol by the data path processor to a control path processor is conducted to complete the authentication handshaking protocol.

20130286922, Oct 31, 2013

Apr 30, 2012

13/460821

Brijesh Nambiar - Santa Clara CA, US

H04W 4/06

370312

A network device includes a communication interface and a processor. The communication interface may receive a multicast stream that includes a frame. The processor is coupled to the communication interface and may determine whether to send the frame unicast or multicast. The communication interface transmits the frame unicast or multicast based on the determination by the processor. The determination by the processor may be based on characteristics of the frame. If the characteristics of the frame include characteristics of a key frame such as an I-frame, the processor may determine to transmit the frame unicast. The determination may also be based on a predetermined state of client devices that are to receive the frame. If a client device is in a predetermined state such as a power save state, the processor may determine to transmit the frame unicast to that client device. Other embodiments are also described.