Granted Patent B2

US 12,335,062 · App. 18/608,677 · Granted Jun 17, 2025

Inventors: Balaji Sundararajan (Fremont, CA); Ajeet Pal Singh Gill (Fremont, CA); Srilatha Tangirala (San Jose, CA); Nithin Bangalore Raju (San Jose, CA); Ravi Kiran Chintallapudi (Pleasanton, CA); Pradeepan Kannawadi (Dublin, CA); Ganesh Devendrachar (Milpitas, CA)

Assignee: Cisco Technology, Inc.

H04L12/28H04L67/10

Abstract

Claims (64)

1. A method comprising:

receiving, at a first multi-tenant edge (MTE) device associated with a first site of a multisite wide area network (WAN), an indication that a tenant device has connected to the first site, the indication including a physical transport interface associated with the tenant device;

sending, from the first MTE device and to a Software-Defined Networking (SDN) controller associated with the multisite WAN based at least in part on the indication, a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request including the physical transport interface of the tenant device and a type of the tenant device;

receiving, at the first MTE device and from the SDN controller, the virtual transport interface including an indication of one or more routing attributes associated with the tenant device;

establishing, at least partly by the first MTE device and based at least in part on the physical transport interface of the tenant device and the virtual transport interface, a first session between the first MTE device and a second MTE device associated with a second site of the multisite WAN, the session configured to provide the one or more routing attributes associated with the tenant device;

sending, from the first MTE device and to the tenant device, the virtual transport interface; and

forwarding, by the first MTE device and based at least in part on the virtual transport interface, network traffic from the tenant device and to the second MTE device via the first session.

2. The method of claim 1 , wherein the one or more routing attributes indicate at least one of:

network links associated with the first session configured to guarantee a service level agreement (SLA);

the network links associated with the first session configured as a best-effort network link;

one or more restrictions of the network links associated with the first session; or

a bandwidth guarantee of the network links associated with the first session.

3. The method of claim 1 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.

4. The method of claim 1 , further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.

5. The method of claim 1 , further comprising sending, from the first MTE device and to the one or more second MTE devices, the virtual transport interface associated with the tenant device and the physical transport interface associated with the tenant device,

wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the one or more second MTE devices to establish the one or more sessions with the first MTE device using the physical transport interface.

6. The method of claim 1 , further comprising:

receiving configuration data at the SDN controller and from a computing device associated with the tenant device;

determining, by the SDN controller and based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and

determining, by the SDN controller and based at least in part on the tier, the virtual transport interface.

7. The method of claim 1 , further comprising receiving, at the first MTE device and from the SDN controller, an instruction to establish the first session using the physical transport interface, and wherein establishing the first session is based at least in part on receiving the instruction.

8. A system comprising:

one or more processors; and

one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving, at a first multi-tenant edge (MTE) device associated with a first site of a multisite wide area network (WAN), an indication that a tenant device has connected to the first site, the indication including a physical transport interface associated with the tenant device;

sending, from the first MTE device and to a Software-Defined Networking (SDN) controller associated with the multisite WAN based at least in part on the indication, a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request including the physical transport interface of the tenant device and a type of the tenant device;

receiving, at the first MTE device and from the SDN controller, the virtual transport interface including an indication of one or more routing attributes associated with the tenant device;

establishing, at least partly by the first MTE device and based at least in part on the physical transport interface of the tenant device and the virtual transport interface, a first session between the first MTE device and a second MTE device associated with a second site of the multisite WAN, the session configured to provide the one or more routing attributes associated with the tenant device;

sending, from the first MTE device and to the tenant device, the virtual transport interface; and

forwarding, by the first MTE device and based at least in part on the virtual transport interface, network traffic from the tenant device and to the second MTE device via the first session.

9. The system of claim 8 , wherein the one or more routing attributes indicate at least one of:

network links associated with the first session configured to guarantee a service level agreement (SLA);

the network links associated with the first session configured as a best-effort network link;

one or more restrictions of the network links associated with the first session; or

a bandwidth guarantee of the network links associated with the first session.

10. The system of claim 8 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.

11. The system of claim 8 , the operations further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.

12. The system of claim 8 , the operations further comprising sending, from the first MTE device and to the one or more second MTE devices, the virtual transport interface associated with the tenant device and the physical transport interface associated with the tenant device,

wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the one or more second MTE devices to establish the one or more sessions with the first MTE device using the physical transport interface.

13. The system of claim 8 , the operations further comprising:

receiving configuration data at the SDN controller and from a computing device associated with the tenant device;

determining, by the SDN controller and based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and

determining, by the SDN controller and based at least in part on the tier, the virtual transport interface.

14. The system of claim 8 , the operations further comprising receiving, at the first MTE device and from the SDN controller, an instruction to establish the first session using the physical transport interface, and wherein establishing the first session is based at least in part on receiving the instruction.

15. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving, at a first multi-tenant edge (MTE) device associated with a first site of a multisite wide area network (WAN), an indication that a tenant device has connected to the first site, the indication including a physical transport interface associated with the tenant device;

sending, from the first MTE device and to a Software-Defined Networking (SDN) controller associated with the multisite WAN based at least in part on the indication, a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request including the physical transport interface of the tenant device and a type of the tenant device;

receiving, at the first MTE device and from the SDN controller, the virtual transport interface including an indication of one or more routing attributes associated with the tenant device;

establishing, at least partly by the first MTE device and based at least in part on the physical transport interface of the tenant device and the virtual transport interface, a first session between the first MTE device and a second MTE device associated with a second site of the multisite WAN, the session configured to provide the one or more routing attributes associated with the tenant device;

sending, from the first MTE device and to the tenant device, the virtual transport interface; and

forwarding, by the first MTE device and based at least in part on the virtual transport interface, network traffic from the tenant device and to the second MTE device via the first session.

16. The one or more non-transitory computer-readable media of claim 15 , wherein the one or more routing attributes indicate at least one of:

network links associated with the first session configured to guarantee a service level agreement (SLA);

the network links associated with the first session configured as a best-effort network link;

one or more restrictions of the network links associated with the first session; or

a bandwidth guarantee of the network links associated with the first session.

17. The one or more non-transitory computer-readable media of claim 15 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.

18. The one or more non-transitory computer-readable media of claim 15 , the operations further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.

19. The one or more non-transitory computer-readable media of claim 15 , the operations further comprising sending, from the first MTE device and to the one or more second MTE devices, the virtual transport interface associated with the tenant device and the physical transport interface associated with the tenant device,

wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the one or more second MTE devices to establish the one or more sessions with the first MTE device using the physical transport interface.

20. The one or more non-transitory computer-readable media of claim 15 , the operations further comprising:

receiving configuration data at the SDN controller and from a computing device associated with the tenant device;

determining, by the SDN controller and based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and

determining, by the SDN controller and based at least in part on the tier, the virtual transport interface.

Assignments (1)

Continuity (2)

References Cited (12)