Patent US6741592B1 successfully refreshed from Google Patents.
US6741592B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Private VLANs
Assignee: Cisco Systems Inc
•
Filing: 2000-05-22
•
Granted: 2004-05-25
•
Expires: 2020-05-22
Abstract
Abstract The invention uses a layer 2 switch (L 2 switch), or bridge, to separate user's message traffic by use of Virtual Local Area Networks (VLANs) defined within the switch. Three new types of ports are defined, “promiscuous” ports “isolated” ports, and “community” ports. Three types of VLANs internal to the switch are defined, “primary” VLANs, “isolated” VLANs and “community” VLANs. The promiscuous ports are connected to layer 3 or layer 4 devices. Isolated ports and community ports are connected to individual user's servers, etc., and maintain traffic for each user separate from other users. The primary VLAN connects to all promiscuous ports, to all isolated ports, and to all community ports. The primary VLAN is a one way connection from promiscuous ports to isolated or community ports. An isolated VLAN connects to all promiscuous ports and to all isolated ports. The isolated VLAN is a one way connection from an isolated port to the promiscuous ports. A community VLAN is defined as connecting to a group of community ports, and also connecting to all of the promiscuous ports. The group of community ports is referred to as a “community” of community ports. A community VLAN is a one way connection from a community of ports to the promiscuous ports, but allows a packet received by one community port to be transmitted out of the switch, through the other community ports connected to that community VLAN.
Inventors
- 👤 Thomas J. Edsall
- 👤 Marco Foschiano
- 👤 Michael Fine
- 👤 Thomas Nosella
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 14:23
CPC Classifications
H; H04; H04L; H04L12/00; H04L12/28; H04L12/46; H04L12/4641
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
116 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: establishing at least one promiscuous port, said promiscuous port receiving packets from an external circuit connected to said promiscuous port; transferring a packet by a first VLAN within said switch from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 2
Independent Claim
116 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: establishing at least one promiscuous port, said promiscuous port receiving packets from an external circuit connected to said promiscuous port; transferring a packet by a first VLAN within said switch from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 3
Dependent Claim
63 words
The method as in claim 1 further comprising: directing a first user's packets, said first user's packets received by a first isolated port assigned to said first user, from an external circuit connected to said first isolated port, to a selected promiscuous port by said isolated VLAN, and preventing any other isolated port from receiving said first user's packets from said isolated VLAN.
Claim 4
Dependent Claim
47 words
The method as in claim 1 further comprising: transferring a packet by a community VLAN from a community port to both said plurality of promiscuous ports, and to all other community ports connected to said community VLAN, but not to any other isolated ports or community ports.
Claim 5
Independent Claim
154 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: transferring first packets by a first VLAN from at least one promiscuous port to a plurality of isolated ports, said at least one promiscuous port receiving said first packets from an external circuit connected to said at least one promiscuous port, each of said isolated ports detecting a packet addressed to a selected isolated port, and only said selected isolated port receiving said packet; and transferring second packets by a second VLAN from said plurality of isolated ports to said at least one promiscuous port, a selected isolated port of said plurality of isolated ports receiving said second packets from an external circuit connected to said selected isolated port, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 6
Independent Claim
154 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: transferring first packets by a first VLAN from at least one promiscuous port to a plurality of isolated ports, said at least one promiscuous port receiving said first packets from an external circuit connected to said at least one promiscuous port, each of said isolated ports detecting a packet addressed to a selected isolated port, and only said selected isolated port receiving said packet; and transferring second packets by a second VLAN from said plurality of isolated ports to said at least one promiscuous port, a selected isolated port of said plurality of isolated ports receiving said second packets from an external circuit connected to said selected isolated port, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 7
Dependent Claim
63 words
The method as in claim 4 further comprising: directing a first user's packets, said first user's packets received by a first isolated port assigned to said first user from an external circuit connected to said first isolated port, to a selected promiscuous port by said second VLAN, and preventing any other isolated port from receiving said first user's packets from said second VLAN.
Claim 8
Dependent Claim
91 words
A switch, comprising: a promiscuous port for receiving incoming packets from an external network, and for transmitting outgoing packets to said external network; and a plurality of isolated ports, a selected isolated port of said plurality of isolated ports connected to a selected private network, said selected isolated port receiving packets from said selected private network and transmitting packets onto said selected private network, said selected isolated port exchanging packets with said promiscuous port through a path inside said switch, and said isolated port not exchanging packets with another isolated port.
Claim 9
Dependent Claim
91 words
A switch, comprising: a promiscuous port for receiving incoming packets from an external network, and for transmitting outgoing packets to said external network; and a plurality of isolated ports, a selected isolated port of said plurality of isolated ports connected to a selected private network, said selected isolated port receiving packets from said selected private network and transmitting packets onto said selected private network, said selected isolated port exchanging packets with said promiscuous port through a path inside said switch, and said isolated port not exchanging packets with another isolated port.
Claim 10
Dependent Claim
109 words
The switch of claim 6 further comprising: a plurality of community ports, each of said community ports of said plurality of community ports receiving packets from a selected external network and transmitting packets onto said selected external network, each port of said community of ports exchanging packets through a path internal to said switch with said promiscuous port, and said each port of said community of ports exchanging packets with all ports of said plurality of community ports through a path within said switch, and said each port of said community of ports not exchanging packets with any other port of said switch through a path within said switch.
Claim 11
Dependent Claim
85 words
The switch of claim 6 further comprising: a plurality of virtual local area networks (VLANS) implemented inside said switch; a first VLAN of said plurality of VLANs designated as a primary VLAN, said primary VLAN carrying packets from said promiscuous port to said plurality of isolated ports, and only a designated isolated port receiving said packet; and a second VLAN of said plurality of VLANs designated as an isolated VLAN, said isolated VLAN carrying packets from said plurality of isolated ports to said promiscuous port.
Claim 12
Dependent Claim
78 words
The switch as in claim 8 further comprising: a plurality of community ports; and a third VLAN of said plurality of VLANs designated as a community VLAN, said community VLAN carrying packets received from each community port of said plurality of community ports to said promiscuous port, and said community VLAN carrying said community packets to each community port of said plurality of community ports, but not carrying said community packets to any other port of said switch.
Claim 13
Dependent Claim
14 words
The switch of claim 6 further comprising: said switch is a layer 2 switch.
Claim 14
Dependent Claim
136 words
A switch in a computer network, comprising means for implementing a plurality of virtual local area networks (VLANs) in said switch, comprising: means for establishing at least one promiscuous port, said promiscuous port receiving packets from an external circuit connected to said promiscuous port; p 1 means for transferring a packet by a first VLAN of said plurality of VLANs from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and means for transferring packets by a second VLAN of said plurality of VLANs from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 15
Dependent Claim
136 words
A switch in a computer network, comprising means for implementing a plurality of virtual local area networks (VLANs) in said switch, comprising: means for establishing at least one promiscuous port, said promiscuous port receiving packets from an external circuit connected to said promiscuous port; p 1 means for transferring a packet by a first VLAN of said plurality of VLANs from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and means for transferring packets by a second VLAN of said plurality of VLANs from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 16
Dependent Claim
65 words
The switch of claim 11 , further comprising: means for directing a first user's packets, said first user's packets received by a first isolated port assigned to said first user, from an external circuit connected to said first isolated port, to a selected promiscuous port by said isolated VLAN, and preventing any other isolated port from receiving said first user's packets from said isolated VLAN.
Claim 17
Dependent Claim
48 words
The switch of claim 11 , further comprising: means for transferring a packet by a community VLAN from a community port to both said plurality of promiscuous ports, and to all other community ports connected to said community VLAN, but not to any other port of said switch.
Claim 18
Dependent Claim
21 words
A computer readable media containing instructions for a computer for executing the method of claim 1 , or claim 4 .
Claim 19
Dependent Claim
27 words
Signals on a computer network, said signals readable by a computer, said signals carrying instructions for executing the method of claim 1 , or claim 4 .
Claim 20
Independent Claim
109 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving, by at least one promiscuous port, packets from an external circuit connected to said promiscuous port; transferring packets by a first VLAN from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 21
Independent Claim
109 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving, by at least one promiscuous port, packets from an external circuit connected to said promiscuous port; transferring packets by a first VLAN from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 22
Independent Claim
120 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving a user's packet, by a first isolated port assigned to said user, said packet received from an external circuit connected to said first isolated port; and transferring said packet by an isolated VLAN to a selected promiscuous port to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 23
Independent Claim
120 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving a user's packet, by a first isolated port assigned to said user, said packet received from an external circuit connected to said first isolated port; and transferring said packet by an isolated VLAN to a selected promiscuous port to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 24
Independent Claim
119 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving a user's packet, by a first community port assigned to said user, said packet received from an external circuit connected to said first community port; and transferring said packet by a community VLAN to both a plurality of promiscuous ports connected to external circuits, and to all other community ports connected to said community VLAN, but not to any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 25
Independent Claim
119 words
A method of implementing virtual local area networks (VLANs) in a switch in a computer network, comprising: receiving a user's packet, by a first community port assigned to said user, said packet received from an external circuit connected to said first community port; and transferring said packet by a community VLAN to both a plurality of promiscuous ports connected to external circuits, and to all other community ports connected to said community VLAN, but not to any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 26
Dependent Claim
107 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: at least one first promiscuous port to receive packets from an external circuit connected to said promiscuous port; a plurality of isolated ports to receive packets through a first VLAN from said at least one promiscuous port, and only a selected isolated port receiving said packet; and at least one second promiscuous port to receive packets through a second VLAN from said plurality of isolated ports, said second VLAN configured so that a packet received through said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 27
Dependent Claim
107 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: at least one first promiscuous port to receive packets from an external circuit connected to said promiscuous port; a plurality of isolated ports to receive packets through a first VLAN from said at least one promiscuous port, and only a selected isolated port receiving said packet; and at least one second promiscuous port to receive packets through a second VLAN from said plurality of isolated ports, said second VLAN configured so that a packet received through said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 28
Dependent Claim
115 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: a first isolated port assigned to a user to receive said user's packet from an external circuit connected to said first isolated port; and a selected promiscuous port to receive said packet through an isolated VLAN, said packet to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 29
Dependent Claim
115 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: a first isolated port assigned to a user to receive said user's packet from an external circuit connected to said first isolated port; and a selected promiscuous port to receive said packet through an isolated VLAN, said packet to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 30
Dependent Claim
118 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: a plurality of community ports, including a first community port assigned to a user to receive said user's packet from an external circuit connected to said first community port; and a plurality of promiscuous ports connected to external circuits to receive said packet through a community VLAN, all other community ports connected to said community VLAN also receiving said packet, but not any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports, said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 31
Dependent Claim
118 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: a plurality of community ports, including a first community port assigned to a user to receive said user's packet from an external circuit connected to said first community port; and a plurality of promiscuous ports connected to external circuits to receive said packet through a community VLAN, all other community ports connected to said community VLAN also receiving said packet, but not any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports, said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 32
Dependent Claim
111 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving, by at least one promiscuous port, packets from an external circuit connected to said promiscuous port; means for transferring packets by a first VLAN from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and means for transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 33
Dependent Claim
111 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving, by at least one promiscuous port, packets from an external circuit connected to said promiscuous port; means for transferring packets by a first VLAN from said at least one promiscuous port to a plurality of isolated ports, and only a selected isolated port receiving said packet; and means for transferring packets by a second VLAN from said plurality of isolated ports to said plurality of promiscuous ports, said second VLAN configured so that a packet transferred to said second VLAN by a first isolated port cannot be received and retransmitted by a second isolated port.
Claim 34
Dependent Claim
120 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving a user's packet, by a first isolated port assigned to said user, said packet received from an external circuit connected to said first isolated port; and means for transferring said packet by an isolated VLAN to a selected promiscuous port to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 35
Dependent Claim
120 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving a user's packet, by a first isolated port assigned to said user, said packet received from an external circuit connected to said first isolated port; and means for transferring said packet by an isolated VLAN to a selected promiscuous port to be transferred to an external circuit connected to said promiscuous port, said isolated VLAN configured as a one way connection from all isolated ports to all promiscuous ports and also configured to prevent any other isolated port from receiving said user's packets from said isolated VLAN, said all promiscuous ports also connected via a one way primary VLAN to said all isolated ports.
Claim 36
Dependent Claim
119 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving a user's packet, by a first community port assigned to said user, said packet received from an external circuit connected to said first community port; and means for transferring said packet by a community VLAN to both a plurality of promiscuous ports connected to external circuits, and to all other community ports connected to said community VLAN, but not to any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports, said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 37
Dependent Claim
119 words
A switch implementing virtual local area networks (VLANs) in a computer network, comprising: means for receiving a user's packet, by a first community port assigned to said user, said packet received from an external circuit connected to said first community port; and means for transferring said packet by a community VLAN to both a plurality of promiscuous ports connected to external circuits, and to all other community ports connected to said community VLAN, but not to any other ports of said switch, said community VLAN configured as a one way connection from all community ports in said community VLAN to all promiscuous ports, said all promiscuous ports also connected via a one way primary VLAN to all community ports.
Claim 38
Dependent Claim
32 words
A computer-readable media, comprising: said computer-readable media containing instructions for execution in a processor for the practice of the method of claim 16 , or claim 17 , or claim 18 .
Claim 39
Dependent Claim
36 words
Electromagnetic signals propagating on a computer network, comprising: said electromagnetic signals carrying instructions for execution on a processor for the practice of the method of claim 16 , or claim 17 , or claim 18 .
References Cited (Backward Citations)
US6560236B1
Cited
US6147995A
Cited
US6058429A
Cited
US6304901B1
Cited
US6111876A
Cited
US5959989A
Cited
US6208649B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-05-25 | 2007-11-24 | 2008-05-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-05-25 | 2011-11-24 | 2012-05-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-05-25 | 2015-11-24 | 2016-05-25 | $7700.00 | Window Closed / Lapsed |