Application-Aware Network Virtualization for Enterprise LAN Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional application aware networks face design complexities and deficiencies in access networks within enterprise Local Area Networks (LAN) and wireless LAN infrastructure, leading to challenges with application-based network segmentation, virtualization, and management, especially for highly mobile users who experience inconsistent network applications when roaming across different network segments.
Innovation Solution
A networking device with a memory storing associations between network applications and virtual ports, where each application is associated with a subset of virtual ports, and a processor that receives packets from network applications and assigns them to the corresponding virtual ports, enabling application-aware virtual networking by classifying and forwarding packets based on application profiles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional application aware networks are used in enterprise LAN and wireless LAN infrastructure, then network applications and services can be provided, but design complexities and deficiencies are embedded in access networks creating problems with application based network segmentation, virtualization, and management
Solution Approach 1:
The patent segments network traffic into different virtual networks based on application type. Each virtual network is isolated and can be managed independently, allowing application-based segmentation without affecting the entire network. This resolves the complexity by organizing the network into manageable segments rather than a monolithic structure.
Solution Approach 2:
The patent introduces virtual network interfaces and virtual switches as intermediary components between physical network elements and application layers. These virtual intermediaries abstract the complexity of network segmentation and routing, providing simplified management while enabling sophisticated application-based networking.
2Reliability
If manual and static provisioning of IHS networks is used, then network configuration can be controlled, but it makes it highly undesirable and extremely difficult to perform technology evaluations while maintaining network applications and services
Solution Approach 1:
The patent allows network configurations to be pre-defined and stored as templates or profiles before actual deployment. When a new network service needs to be provisioned, the system can automatically retrieve and apply the appropriate pre-configured template, eliminating manual configuration time while ensuring consistency through automated enforcement of predefined settings.
Solution Approach 2:
The patent implements automated network provisioning where the system automatically configures network parameters, assigns virtual network interfaces, and establishes connections based on application requirements. This self-service capability eliminates manual intervention and accelerates deployment while maintaining reliability through automated validation of network configurations.
3Adaptability or versatility
If networks are provisioned for highly mobile users, then user mobility is supported, but consistent network applications and services may not be maintained when users roam across different network segments or from one network to another
Solution Approach 1:
The patent creates universal virtual network interfaces that can operate consistently across different physical network segments and locations. These virtual interfaces provide a uniform abstraction layer that maintains the same network application behavior whether the user is connected via wired LAN, wireless WLAN, or mobile network, ensuring service consistency despite physical network variations.
Solution Approach 2:
The patent implements continuous feedback mechanisms that monitor network conditions and user locations in real-time. When a mobile user roams to a different network segment, the system detects this change and automatically adjusts virtual network configurations to maintain consistent service levels, ensuring seamless transition without application disruption.
Data Source
AI summary
A networked system includes a plurality of information handling systems (IHSs). A networking device couples the plurality of IHSs to a network. The networking device is operable to receive a packet associated with a first network application from a first IHS of the plurality of IHSs. The networking device then determines that a first virtual port is associated with the first network application in a database. The networking device then assign packets received from the first IHS and associated with the first network application to the first virtual port. The networking device then forwards packets received from the first IHS and associated with the first network application over the network using the first virtual port. The first virtual port provides access to a virtual network that is provided for the first network application and configured using network information associated with the first network application.