Multi-VLAN Access Port Endpoint Assignment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional access ports in networks are limited to a single VLAN, leading to inefficiencies in IP address allocation and potential network meltdowns due to insufficient IP addresses and inadequate VLAN distribution, which can result in broadcast congestion and security issues.

Innovation Solution

A network device that configures access ports to allow multiple VLANs without requiring VLAN tagging, using endpoint identifiers to dynamically assign endpoints to VLANs based on available IP addresses, enabling efficient IP address allocation and flexible VLAN assignment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access ports are configured for a single VLAN, then VLAN isolation and security are maintained, but IP address allocation efficiency deteriorates and network scalability is limited

Engineering Contradiction:
ImproveVLAN isolation and securityVSAvoidIP address allocation efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the VLAN assignment at the endpoint level rather than port level. Each endpoint within an access port group can be assigned to different VLANs dynamically, while the access port itself remains logically associated with multiple VLANs. This segmentation resolves the contradiction by maintaining VLAN isolation for each endpoint while enabling efficient IP address allocation across multiple VLANs through the endpoint identifier-based assignment mechanism.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces dynamic VLAN assignment based on endpoint identifiers and available IP addresses. Instead of static port-to-VLAN mapping, the system dynamically determines VLAN membership for each endpoint connected to the access port. This dynamic approach allows the network to adapt to changing conditions (IP address availability, endpoint connections) while maintaining security through per-endpoint VLAN isolation.

Inventive Principle:
Principle #15Dynamics

2Adaptability or versatility

If access ports support multiple VLANs without tagging, then network flexibility and scalability improve, but VLAN distribution control and security management become more complex

Engineering Contradiction:
Improvenetwork flexibilityVSAvoidVLAN distribution control
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a self-service mechanism where the network device automatically performs VLAN assignment based on endpoint identifiers and IP address availability. The system autonomously determines which VLAN an endpoint should join without requiring manual configuration or complex control plane interactions. This self-service approach simplifies VLAN distribution control while maintaining network flexibility, as the device handles the complexity internally without exposing it to network administrators.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent incorporates feedback mechanisms where the network device monitors IP address availability across VLANs and uses this information to make intelligent VLAN assignment decisions. The system continuously evaluates the state of IP address pools in different VLANs and adjusts endpoint assignments accordingly, ensuring balanced utilization and preventing network meltdowns. This feedback-driven approach simplifies control by automating decision-making based on real-time network conditions.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If traditional access ports are used with single VLAN assignment, then configuration simplicity is maintained, but network performance deteriorates due to broadcast congestion and insufficient IP addresses

Engineering Contradiction:
Improveconfiguration simplicityVSAvoidnetwork performance
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The patent makes access ports multi-functional by enabling them to serve multiple VLANs simultaneously without requiring trunk port configuration or VLAN tagging. The access port group can accommodate endpoints from different VLANs while maintaining the simplicity of access port operation. This universality allows a single access port configuration to fulfill multiple VLAN servicing functions, improving network performance through better IP address utilization and reduced broadcast congestion while preserving configuration simplicity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10397141B2Access port for one or more VLANs
Publication Date: 2019.08.27 CISCO TECHNOLOGY INC
  • US10397141B2 patent drawing
  • US10397141B2 patent drawing
  • US10397141B2 patent drawing

AI summary

In one embodiment a network device includes a plurality of ports. The network device is adapted to receive at least one configuring instruction, and adapted, after receipt of any of the at least one configuring instruction, to configure one or more access ports, of the plurality of ports, for endpoint virtual local area network (VLAN) assignment that is in accordance with at least one VLAN assignment algorithm. The at least one VLAN assignment algorithm allows at least two endpoints to be assigned to at least two different respective VLANs of a plurality of VLANs in a network, the at least one VLAN assignment algorithm enabling the at least two endpoints to connect to a same access port of the one or more access ports and provide data which is not VLAN tagged when received at the same access port.