Granted Patent B2

US 7,508,757 · App. 11/229,114 · Granted Mar 24, 2009

Abstract

Claims (88)

1. A method of operating a bridge node in a network system, the method comprising:

receiving a frame, from a device in the network system, the frame comprising a source network address;

responsive to at least one condition, storing the source address in a forwarding table associated with the bridge if the at least one condition is satisfied;

the bridge node comprises a plurality of ports;

the device in the network system is other than the bridge node;

the frame is received at a port in the plurality of ports;

the at least one condition is associated with the port; and

the at least one condition is satisfied if the frame was received within a time window T w and the number of frames that were received at the port within the time window T w and whose respective source network addresses were stored in the forwarding table does not exceed a threshold number.

2. The method of claim 1 wherein the at least one condition further comprises whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in the forwarding table.

3. The method of claim 2 and further comprising adjusting the threshold number at different times.

4. The method of claim 1 :

wherein each port in the plurality of ports has an associated threshold number; and

wherein the threshold number associated with one port in the plurality of ports differs from the threshold number associated with another port in the plurality of ports.

5. The method of claim 1 and further comprising adjusting the time window T w at different times.

6. The method of claim 1 :

wherein each port in the plurality of ports has an associated time window T w ; and

wherein the time window T w associated with one port in the plurality of ports differs in duration from the time window T w associated with another port in the plurality of ports.

7. The method of claim 1 and further comprising the bridge determining whether a plurality of source addresses in the forwarding table are authentic.

8. The method of claim 7 and further comprising the bridge issuing a request to the network system for determining whether a plurality of source addresses in the forwarding table are authentic.

9. The method of claim 8 and further comprising receiving at the bridge a response to the request, the response provided by an additional bridge.

10. The method of claim 7 and further comprising, in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic.

11. The method of claim 10 wherein the at least one condition further comprises whether a number of source addresses having an inauthentic indication in the table exceed a threshold.

12. The method of claim 7 and further comprising, responsive to the at least one condition associated with the port, storing a set of parameters associated with the frame, the set of parameters consisting of an identifier of the port and an identifier of a time of receipt of the frame.

13. The method of claim 12 wherein the parameters further comprise an indication of a type of the port and an indicator of whether the source address has been determined for authenticity.

14. The method of claim 1 wherein the network system comprises an Ethernet network system.

15. A method of operating a bridge node in a network system, the bridge node comprising a plurality of ports, the method comprising:

receiving a frame, from a device in the network system and other than the bridge node, at a port in the plurality of ports, the frame comprising a source network address; and

conditioned on whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in a forwarding table, storing the source address in a forwarding table associated with the bridge, wherein the storing step is further conditioned on whether the frame was received within a time window T w of when a threshold number of previous frames were received at the port and their addresses were stored in the table.

16. The method of claim 15 and further comprising adjusting the threshold number at different times.

17. The method of claim 15 and further comprising adjusting the time window T w at different times.

18. The method of claim 17 and further comprising the steps of:

determining whether a plurality of source addresses in the forwarding table are authentic; and

in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic.

19. The method of claim 18 wherein the at least one condition further comprises whether a number of source addresses having an inauthentic indication in the table exceed a threshold.

20. The method of claim 15 and further comprising the steps of:

determining whether a plurality of source addresses in the forwarding table are authentic; and

in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic.

21. The method of claim 20 wherein the at least one condition further comprises whether a number of source addresses having an inauthentic indication in the table exceed a threshold.

22. A bridge node in a network system, the bridge node comprising:

a plurality of ports, wherein each port is operable to receive a frame from a device in the network system and other than the bridge node, the frame comprising a source network address; and

circuitry, responsive to at least one condition associated with the port, for storing the source address in a forwarding table associated with the bridge if the at least one condition is satisfied, wherein the at least one condition comprises whether the frame was received within a time window T w and the number of frames that were received at the port within the time window T w and whose respective source network addresses were stored in the table does not exceed a threshold number.

23. The node of claim 22 wherein the at least one condition further comprises whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in the forwarding table.

24. A bridge node in a network system, the bridge node comprising:

a plurality of ports, wherein each port is operable to receive a frame from a device in the network system and other than the bridge node, the frame comprising a source network address; and

circuitry, conditioned on whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in a forwarding table, for storing the source address in a forwarding table associated with the bridge if the at least one condition is satisfied, wherein the circuitry for storing is further conditioned on whether the frame was received within a time window T w and the number of frames that were received at the port within the time window T w and whose respective source network addresses were stored in the table does not exceed a threshold number.

25. The node of claim 24 and further comprising circuitry for:

determining whether a plurality of source addresses in the forwarding table are authentic; and

in response to the determining circuitry, circuitry for:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic.

26. A method of operating a bridge node in a network system, the bridge node comprising a plurality of ports, the method comprising:

receiving a frame, from a device in the network system and other than the bridge node, at a port in the plurality of ports, the frame comprising a source network address;

responsive to at least one condition associated with the port, storing the source address in a forwarding table associated with the bridge if the at least one condition is satisfied;

wherein the at least one condition comprises whether the frame was received within a time window T w of when a threshold number of previous frames were received at the port and their respective source network addresses were stored in the table;

wherein the bridge determining whether a plurality of source addresses in the forwarding table are authentic, wherein in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic; and

wherein the at least one condition further comprises whether a number of source addresses having an inauthentic indication in the table exceed a threshold.

27. A method of operating a bridge node network system, the bridge node comprising a plurality of ports, the method comprising:

receiving a frame, from a device in the network system and other than the bridge node, at a port in the plurality of ports, the frame comprising a source network address;

responsive to at least one condition associated with the port, storing the source address in a forwarding table associated with the bridge if the at least one condition is satisfied;

wherein the at least one condition comprises whether the frame was received within a time window T w of when a threshold number of previous frames were received at the port and their respective source network addresses were stored in the table;

wherein the bridge determining whether a plurality of source addresses in the forwarding table are authentic;

responsive to the at least one condition associated with the port, storing a set of parameters associated with the frame, the set of parameters consisting of an identifier of the port and an identifier of a time of receipt of the frame.

28. A method of operating a bridge node in a network system, the bridge node comprising a plurality of ports, the method comprising:

receiving a frame, from a device in the network system and other than the bridge node, at a port in the plurality of ports, the frame comprising a source network address;

conditioned on whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in a forwarding table, storing the source address in the forwarding table associated with the bridge;

wherein the storing step is further conditioned on whether tie frame was received within a time window T w of when a threshold number of previous frames were received at the port and their addresses were stored in the table;

adjusting the time window T w at different times;

determining whether a plurality of source addresses in the forwarding table are authentic; and

in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic, and

permitting an overwriting of each source address in the table determined to be unauthentic; and

wherein the at least one condition further comprises whether a number of source addresses having, an inauthentic indication in the table exceeds a threshold.

29. A method of operating a bridge node in a network system, the bridge node comprising a plurality of ports, the method comprising:

receiving a frame, from a device in the network system and other than the bridge node, at a port in the plurality of ports, the flame comprising a source network address;

conditioned on whether the source address is different from each and any source address, previously-received in a respective frame at the port, already stored in a forwarding table, storing the source address in the forwarding table associated with the bridge;

determining whether a plurality of source addresses in the forwarding table are authentic; and

in response to the determining step, the steps of:

providing an authentic indication in the table for each source address in the table determined to be authentic; and

permitting an overwriting of each source address in the table determined to be unauthentic; and

wherein the at least one condition further comprises whether a number of source addresses having an inauthentic indication in the table exceed a threshold.

Assignments (9)