1018
`
`EXHIBIT
`
`EXHIBIT
`1018
`
`
`
`EXHIBIT
`
`EXHIBIT
`1018
`
`
`
`APPENDIX I
`
`U.S. Patent No. 7,406,048
`
`No.
`1.
`
`Claim Language
`A controller which controls
`access to multiple independent
`disparate networks in a parallel
`network configuration, the
`disparate networks comprising at
`least one private network and at
`least one network based on the
`Internet, the controller
`comprising:
`
`Accused Instrumentality
`As shown below, the accused Viptela devices are controllers that control access to
`multiple independent disparate networks in a parallel network configuration, the
`disparate networks comprising at least one private network and at least one network
`based on the Internet.
`
`See, e.g., Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 1
`
`
`
`1[a].
`
`a site interface connecting the
`controller to a site;
`
`The accused Viptela devices provide a site interface connecting the controller to a site.
`For example, each accused instrumentality includes at least one Ethernet port that
`connects the controller to a LAN. See, e.g., Viptela Documentation - vEdge 100m Router
`(VIPFAT0008018); Viptela Documentation - vEdge 1000 Router (VIPFAT0008055);
`Viptela Documentation - vEdge 2000 Router (VIPFAT0008120); Viptela Secure SD-WAN
`at 52 (VIPFAT0000343).
`
`
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`http://viptela.com/solutions/overview/ (last visited Oct. 19, 2016).
`
`“vEdge Routers sit at the perimeter of a site (such as remote offices, branches,
`campuses, data centers) and provide highly secure data connectivity over any
`
`Viptela, Inc. - Exhibit 1018
`Page 2
`
`
`
`transport.”
`
`See, e.g., Viptela Secure SD-WAN at 8 (VIPFAT0000299):
`
`1[b].
`
`at least two network interfaces
`which send packets toward the
`disparate networks; and
`
`
`
`The accused Viptela devices provide at least two network interfaces which send packets
`toward disparate networks. For example, each accused devices includes multiple Ethernet
`ports that can be configured to send packets towards different networks. See, e.g., Viptela
`Documentation - vEdge 100m Router (VIPFAT0008018); Viptela Documentation - vEdge
`1000 Router (VIPFAT0008055); Viptela Documentation - vEdge 2000 Router
`(VIPFAT0008120). One of these interfaces can be configured to be the interface
`associated with an MPLS network and another configured to be the interface associated
`
`Viptela, Inc. - Exhibit 1018
`Page 3
`
`
`
`with the Internet.
`
`Below is an exemplary illustration showing the interfaces for the vEdge 1000 Viptela
`device. Although the other accused devices may have a different configuration of
`interfaces, each accused devices includes at least two network interfaces which send
`packets towards the disparate networks.
`
`See, e.g., Viptela Secure SD-WAN at 52 (VIPFAT0000343)
`
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`
`Viptela, Inc. - Exhibit 1018
`Page 4
`
`
`
`1[c].
`
`a packet path selector which
`selects between network
`interfaces, using at least two
`known location address ranges
`which are respectively
`associated with disparate
`networks, according to at least: a
`destination of the packet, an
`optional presence of alternate
`paths to that destination, and at
`least one specified criterion for
`selecting between alternate paths
`when such alternate paths are
`present;
`
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
` “Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections.”
`
`Viptela provides a packet path selector which selects between network interfaces, using at
`least two known location address ranges which are respectively associated with disparate
`networks, according to at least: a destination of the packet, an optional presence of
`alternate paths to that destination, and at least one specified criterion for selecting
`between alternate paths when such alternate paths are present.
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
`“Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections. The appliance then merges these connections
`and applies customer policies to the traffic.”
`
`Viptela vEdge routers provide path and application aware routing, taking into account,
`for instance, the loss and latency of the paths.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 5
`
`
`
`
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 6
`
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 7
`
`
`
`
`
`Viptela vEdge routers are also capable of selecting paths based on the underlying
`application.
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`
`Viptela, Inc. - Exhibit 1018
`Page 8
`
`
`
`and packet latency, and the load, cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`1[d]. wherein the controller receives a
`packet through the site interface
`and sends the packet through the
`network interface that was
`selected by the packet path
`selector.
`
`Viptela provides a controller that receives a packet through the site interface and sends
`the packet through the network interface that was selected by the packet path selector.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 9
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 10
`
`
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”
`
`
`
`
`
`3.
`
`The controller of claim 1,
`wherein the packet path selector
`selects between network
`
`As described below, Viptela devices include a controller wherein the packet path selector
`selects between network interfaces according to a load-balancing criterion, thereby
`promoting balanced loads on devices that carry packets on the selected path after the
`
`Viptela, Inc. - Exhibit 1018
`Page 11
`
`
`
`interfaces according to a load-
`balancing criterion, thereby
`promoting balanced loads on
`devices that carry packets on the
`selected path after the packets
`leave the selected network
`interfaces.
`
`packets leave the selected network interfaces.
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`Viptela, Inc. - Exhibit 1018
`Page 12
`
`
`
`4.
`
`The controller of claim 1,
`wherein the packet path selector
`selects between network
`interfaces according to a
`reliability criterion, thereby
`promoting use of devices that
`will still carry packets on the
`selected path after the packets
`leave the selected network
`interfaces, when other devices
`on a path not selected are not
`functioning.
`
`
`As described below, Viptela devices include a controller wherein the packet path selector
`selects between network interfaces according to a reliability criterion, thereby promoting
`use of devices that will still carry packets on the selected path after the packets leave the
`selected network interfaces, when other devices on a path not selected are not functioning.
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`Viptela, Inc. - Exhibit 1018
`Page 13
`
`
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`Viptela, Inc. - Exhibit 1018
`Page 14
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`
`Page 15
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 15
`
`
`
`
`
`See, e.g., Viptela Documentation - Components of Application-Aware Routing at 107
`(VIPFAT0006143):
`
`
`
`5.
`
`The controller of claim 1,
`wherein the controller sends
`packets from a selected network
`interface to a VPN.
`
`
`As described below, Viptela devices include a controller wherein the controller sends
`packets from a selected network interface to a VPN.
`
`
`
`See, e.g., Viptela Documentation - Network Interfaces at 23 (VIPFAT0005807):
`
`“In the Viptela overlay network design, interfaces are associated with VPNs. The
`interfaces that participate in a VPN are configured and enabled in that VPN. Each
`
`Viptela, Inc. - Exhibit 1018
`Page 16
`
`
`
`interface can be present only in a single VPN .
`
`For each network interface, you can configure a number of interface-specific
`properties, such as DHCP clients and servers, VRRP, interface MTU and speed,
`and PPPoEAt a high level, for an interface to be operational, you must configure
`an IP address for the interface and mark it as operational (no shutdown). In
`practice, you always configure additional parameters for each interface.”
`
`See, e.g., Viptela Documentation - Transport-Side NAT Operation at 153
`(VIPFAT0006187):
`
`“We use the following figure to explain how the NAT functionality on the vEdge
`router splits traffic into two flows (or two tunnels) so that some of it remains
`within the overlay network and some goes directly to the Internet or other public
`network.
`
`In this figure, the vEdge router has two interfaces:
`
`
`
`• Interface ge0/1 faces the local site and is in VPN 1. Its IP address is 10.1.12.0/24.
`
`Viptela, Inc. - Exhibit 1018
`Page 17
`
`
`
`• Interface geO/O faces the transport cloud and is in VPN 0 (the transport VPN).
`Its IP address is 192.23.100.0/24, and it uses the default OMP port number, 12346,
`for overlay network tunnels.”
`
`See, e.g., Viptela Documentation - Transport-Side NAT Operation at 154
`(VIPFAT0006188):
`
`“Once NAT is enabled on the vEdge router, data traffic affected by the centralized
`data policy (here, the data traffic from VPN 1) is split into two flows:
`
`• Traffic destined for another vEdge router in the overlay network remains in VPN
`1, and it travels directly through the IPsec data plane tunnel from the source vEdge
`router to the destination vEdge router. This traffic never passes through VPN 0,
`and therefore it is never touched by NAT.
`
`• Traffic destined for the public network passes from VPN 1 to VPN 0, where it is
`NATed. During the NAT processing, the source IP address is changed from
`10.1.12.0/24 to that of geO/O, 192.23.100.0/24, and the source port is changed to
`1024.”
`
`“On a vEdge router, you can configure NAT on the service side of the router so
`that data traffic traverses the NAT before entering the overlay tunnel that is located
`in the transport VPN. The service-side NAT performs NAT to mask the IP address
`of data traffic it receives.”
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”
`
`As described below, Viptela devices include a controller wherein the controller sends
`
`6.
`
`The controller of claim 1,
`wherein the controller sends
`
`Viptela, Inc. - Exhibit 1018
`Page 18
`
`
`
`packets from a selected network
`interface to a point-to-point
`private network connection.
`
`packets from a selected network interface to a point-to-point private network connection.
`
`See Viptela vEdge Cloud Data Sheet at 1 (VIPFAT0004627):
`
`“Transport independent nature of the Vipteia SD-WAN solution allows leveraging
`variety of connectivity methods in the active-active fashion by securely extending
`SD-\MAN fabric into the public cloud environment across all underlying transport
`networks, such as MPLS, broadband, 3G/4G LTE, satellite and point-to-point
`links.”
`
`7.
`
`A method for combining
`connections for access to
`disparate parallel networks, the
`method comprising the steps of:
`
`As shown below, the accused Viptela devices practice a method for combining
`connections for access to multiple parallel disparate networks.
`
`See Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 19
`
`
`
`7[a].
`
`receiving at a controller a packet
`which has a first site IP address
`as source address and a second
`site IP address as destination
`address;
`
`
`As shown below, the accused Viptela devices receive at a controller a packet which has a
`first site IP address as source address and a second site IP address as destination
`address.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 20
`
`
`
`7[b].
`
`selecting, within the controller
`on a per-packet basis, between a
`path through an Internet-based
`network and a path through a
`private network that is not
`Internet-based; and
`
`
`As shown below, the accused Viptela devices select within the controller on a per-packet
`basis, between a path through an Internet-based network and a path through a private
`network that is not Internet-based.
`
`See, e.g., Viptela Documentation - Deep Packet Inspection at 67 (VIPFAT0006101):
`
`“In addition to examining the network- and transport-layer headers in data packets,
`centralized data policy can be used to examine the application information in the
`data packets' payload . This deep packet inspection offers control over how data
`packets from specific applications or application families are forwarded across the
`network, allowing you to assign the traffic to be carried by specific tunnels. To
`control the traffic flow of specific application traffic based on the traffic loss or
`latency properties on a tunnel, use application-aware routing.”
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`
`Viptela, Inc. - Exhibit 1018
`Page 21
`
`
`
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`Viptela, Inc. - Exhibit 1018
`Page 22
`
`
`
`7[c].
`
`forwarding the packet along the
`selected path toward the second
`site.
`
`
`As described below, the accused Viptela devices forward the packet along the selected
`path toward the second site.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 23
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 24
`
`
`
`See Claim 3.
`
`9.
`
`The method of claim 7, wherein
`the selecting step selects
`between network interfaces
`according to a load-balancing
`criterion, thereby promoting
`balanced loads on devices that
`carry packets on the selected
`path after the packets leave the
`selected network interfaces.
`
`10.
`
`The method of claim 7, wherein
`the selecting step selects
`
`See Claim 4.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 25
`
`
`
`between network interfaces
`according to a reliability
`criterion, thereby promoting use
`of devices that will still carry
`packets on the selected path after
`the packets leave the selected
`network interfaces, when other
`devices on a path not selected
`are not functioning.
`
`The method of claim 7, wherein
`the forwarding step sends
`packets from a selected network
`interface to a VPN.
`
`The method of claim 7, wherein
`the forwarding step sends
`packets from a selected network
`interface to a point-to-point
`private network connection.
`
`A method for controlling access
`to multiple independent
`disparate networks in a parallel
`network configuration, the
`disparate networks comprising at
`least one private network and at
`least one network based on the
`Internet, the method comprising
`the steps of:
`
`11.
`
`12.
`
`13.
`
`See Claim 5.
`
`See Claim 6.
`
`As shown below, the accused Viptela devices practice a method for controlling access to
`multiple independent disparate networks in a parallel network configuration, the
`disparate networks comprising at least one private network and at least one network
`based on the Internet.
`
`See Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 26
`
`
`
`13[a].
`
`receiving a packet through a site
`interface that connects a
`controller to a site;
`
`
`The accused Viptela devices provide a site interface connecting the controller to a site.
`For example, each accused instrumentality includes at least one Ethernet port that
`connects the controller to a LAN. See, e.g., Viptela Documentation - vEdge 100m Router
`(VIPFAT0008018); Viptela Documentation - vEdge 1000 Router (VIPFAT0008055);
`Viptela Documentation - vEdge 2000 Router (VIPFAT0008120); Viptela Secure SD-WAN
`at 52 (VIPFAT0000343).
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 27
`
`
`
`
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`http://viptela.com/solutions/overview/ (last visited Oct. 19, 2016):
`http://viptela.coIn/solutions/overview/ (last visited Oct. 19, 2016):
`
`“vEdge Routers sit at the perimeter of a site (such as remote offices, branches,
`“vEdge Routers sit at the perimeter of a site (such as remote offices, branches,
`campuses, data centers) and provide highly secure data connectivity over any
`campuses, data centers) and provide highly secure data connectivity over any
`transport.”
`transport.”
`
`See, e.g, Viptela Secure SD-WAN at 8 (VIPFAT0000299):
`See, e. g, Viptela Secure SD- WAN at 8 (VIPFA T0000299):
`
`Viptela, Inc. - Exhibit 1018
`
`Page 28
`
`Viptela, Inc. - Exhibit 1018
`Page 28
`
`
`
`13[b].
`
`selecting between at least two
`network interfaces of the
`controller which use at least two
`known location address ranges
`which are respectively
`associated with disparate
`networks, according to at least: a
`destination of the packet, an
`optional presence of alternate
`paths to that destination, and at
`least one specified criterion for
`
`
`
`Viptela devices practice a method for selecting between at least two network interfaces of
`the controller which use at least two known location address ranges which are
`respectively associated with disparate networks, according to at least: a destination of the
`packet, an optional presence of alternate paths to that destination, and at least one
`specified criterion for selecting between alternate paths when such alternate paths are
`present.
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
`Viptela, Inc. - Exhibit 1018
`Page 29
`
`
`
`selecting between alternate paths
`when such alternate paths are
`present; and
`
`“Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections. The appliance then merges these connections
`and applies customer policies to the traffic.”
`
`Viptela vEdge routers provide path and application aware routing, taking into account,
`for instance, the loss and latency of the paths.
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 30
`
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 31
`
`
`
`
`
`Viptela vEdge routers are also capable of selecting paths based on the underlying
`application.
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`
`
`
`
`13[c].
`
`sending the packet through the
`selected network interface.
`
`As described below, the accused Viptela devices send the packet through the selected
`network interface.
`
`Viptela, Inc. - Exhibit 1018
`Page 32
`
`
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 33
`
`
`
`See Claim 3.
`
`15.
`
`The method of claim 13, wherein
`the method selects between
`network interfaces according to a
`load-balancing criterion, thereby
`promoting balanced loads on
`devices that carry packets on the
`selected path after the packets
`leave the selected network
`interfaces.
`
`16.
`
`The method of claim 13, wherein
`the method selects between
`
`See Claim 4.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 34
`
`
`
`network interfaces according to a
`reliability criterion, thereby
`promoting use of devices that
`will still carry packets on the
`selected path after the packets
`leave the selected network
`interfaces, when other devices
`on a path not selected are not
`functioning.
`
`The method of claim 13, wherein
`the method sends packets from a
`selected network interface to a
`VPN.
`
`The method of claim 13, wherein
`the method sends packets from a
`selected network interface to a
`point-to-point private network
`connection.
`
`A controller for combining
`connections for access to
`disparate parallel networks, the
`controller comprising:
`
`17.
`
`18.
`
`19.
`
`See Claim 5.
`
`See Claim 6.
`
`As shown below, the accused Viptela devices are controllers for combining connections
`for access to disparate parallel networks.
`
`See, e.g., Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 35
`
`
`
`19[a]. a site interface configured for
`receiving a packet which has a
`first site IP address as source
`address and a second site IP
`address as destination address;
`and
`
`
`As shown below, the accused Viptela devices receive at a controller a packet which has a
`first site IP address as source address and a second site IP address as destination
`address.
`
`See, e.g., Viptela Documentation- Default Behavior without Data Policy at 168
`(VIPFAT0006203):
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 36
`
`
`
`19[b]. a packet path selector which
`selects, within the controller on a
`per-packet basis, between a path
`through an Internet-based
`network and a path through a
`private network that is not
`Internet-based;
`
`
`“An outer header is added to the packet. At this point, the packet header has these
`contents: TLOC source address, TLOC destination address, ESP header,
`destination IP address, and source IP address.”
`
`As shown below, the accused Viptela devices select within the controller on a per-packet
`basis, between a path through an Internet-based network and a path through a private
`network that is not Internet-based.
`
`
`
`See, e.g., Viptela Documentation - Deep Packet Inspection at 67 (VIPFAT0006101):
`
`“In addition to examining the network- and transport-layer headers in data packets,
`centralized data policy can be used to examine the application information in the
`data packets' payload . This deep packet inspection offers control over how data
`packets from specific applications or application families are forwarded across the
`network, allowing you to assign the traffic to be carried by specific tunnels. To
`control the traffic flow of specific application traffic based on the traffic loss or
`latency properties on a tunnel, use application-aware routing.”
`
`Viptela, Inc. - Exhibit 1018
`Page 37
`
`
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`Viptela, Inc. - Exhibit 1018
`Page 38
`
`
`
`19[c]. wherein the controller receives a
`packet through the site interface
`and sends the packet through the
`network interface that was
`selected by the packet path
`selector.
`
`
`Viptela provides a controller that receives a packet through the site interface and sends
`the packet through the network interface that was selected by the packet path selector.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 39
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 40
`
`
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”
`
`
`
`21.
`
`The controller of claim 19,
`wherein the packet path selector
`selects between network
`
`
`
`See Claim 3.
`
`Viptela, Inc. - Exhibit 1018
`Page 41
`
`
`
`interfaces according to a load-
`balancing criterion, thereby
`promoting balanced loads on
`devices that carry packets on the
`selected path after the packets
`leave the selected network
`interfaces.
`
`The controller of claim 20,
`wherein the packet path selector
`selects between network
`interfaces according to a
`reliability criterion, thereby
`promoti
Accessing this document will incur an additional charge of $.
After purchase, you can access this document again without charge.
Accept $ Charge
Still Working On It
This document is taking longer than usual to download. This can happen if we need to contact the court directly to obtain the document and their servers are running slowly.
Give it another minute or two to complete, and then try the refresh button.
A few More Minutes ... Still Working
It can take up to 5 minutes for us to download a document if the court servers are running slowly.
Thank you for your continued patience.
This document could not be displayed.
We could not find this document within its docket. Please go back to the docket page and check the link. If that does not work, go back to the docket and refresh it to pull the newest information.
Your account does not support viewing this document.
You need a Paid Account to view this document. Click here to change your account type.
Your account does not support viewing this document.
Set your membership
status to view this document.
With a Docket Alarm membership, you'll
get a whole lot more, including:
- Up-to-date information for this case.
- Email alerts whenever there is an update.
- Full text search for other cases.
- Get email alerts whenever a new case matches your search.
One Moment Please
The filing “” is large (MB) and is being downloaded.
Please refresh this page in a few minutes to see if the filing has been downloaded. The filing will also be emailed to you when the download completes.
Your document is on its way!
If you do not receive the document in five minutes, contact support at support@docketalarm.com.
Sealed Document
We are unable to display this document, it may be under a court ordered seal.
If you have proper credentials to access the file, you may proceed directly to the court's system using your government issued username and password.
Access Government Site
