`
`EXHIBIT
`EXHIBIT
`1018
`1018
`
`
`
`APPENDIX I
`
`U.S. Patent No. 7,406,048
`
`No.
`1.
`
`Claim Language
`A controller which controls
`access to multiple independent
`disparate networks in a parallel
`network configuration, the
`disparate networks comprising at
`least one private network and at
`least one network based on the
`Internet, the controller
`comprising:
`
`Accused Instrumentality
`As shown below, the accused Viptela devices are controllers that control access to
`multiple independent disparate networks in a parallel network configuration, the
`disparate networks comprising at least one private network and at least one network
`based on the Internet.
`
`See, e.g., Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 1
`
`
`
`1[a].
`
`a site interface connecting the
`controller to a site;
`
`The accused Viptela devices provide a site interface connecting the controller to a site.
`For example, each accused instrumentality includes at least one Ethernet port that
`connects the controller to a LAN. See, e.g., Viptela Documentation - vEdge 100m Router
`(VIPFAT0008018); Viptela Documentation - vEdge 1000 Router (VIPFAT0008055);
`Viptela Documentation - vEdge 2000 Router (VIPFAT0008120); Viptela Secure SD-WAN
`at 52 (VIPFAT0000343).
`
`
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`http://viptela.com/solutions/overview/ (last visited Oct. 19, 2016).
`
`“vEdge Routers sit at the perimeter of a site (such as remote offices, branches,
`campuses, data centers) and provide highly secure data connectivity over any
`
`Viptela, Inc. - Exhibit 1018
`Page 2
`
`
`
`transport.”
`
`See, e.g., Viptela Secure SD-WAN at 8 (VIPFAT0000299):
`
`1[b].
`
`at least two network interfaces
`which send packets toward the
`disparate networks; and
`
`
`
`The accused Viptela devices provide at least two network interfaces which send packets
`toward disparate networks. For example, each accused devices includes multiple Ethernet
`ports that can be configured to send packets towards different networks. See, e.g., Viptela
`Documentation - vEdge 100m Router (VIPFAT0008018); Viptela Documentation - vEdge
`1000 Router (VIPFAT0008055); Viptela Documentation - vEdge 2000 Router
`(VIPFAT0008120). One of these interfaces can be configured to be the interface
`associated with an MPLS network and another configured to be the interface associated
`
`Viptela, Inc. - Exhibit 1018
`Page 3
`
`
`
`with the Internet.
`
`Below is an exemplary illustration showing the interfaces for the vEdge 1000 Viptela
`device. Although the other accused devices may have a different configuration of
`interfaces, each accused devices includes at least two network interfaces which send
`packets towards the disparate networks.
`
`See, e.g., Viptela Secure SD-WAN at 52 (VIPFAT0000343)
`
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`
`Viptela, Inc. - Exhibit 1018
`Page 4
`
`
`
`1[c].
`
`a packet path selector which
`selects between network
`interfaces, using at least two
`known location address ranges
`which are respectively
`associated with disparate
`networks, according to at least: a
`destination of the packet, an
`optional presence of alternate
`paths to that destination, and at
`least one specified criterion for
`selecting between alternate paths
`when such alternate paths are
`present;
`
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
` “Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections.”
`
`Viptela provides a packet path selector which selects between network interfaces, using at
`least two known location address ranges which are respectively associated with disparate
`networks, according to at least: a destination of the packet, an optional presence of
`alternate paths to that destination, and at least one specified criterion for selecting
`between alternate paths when such alternate paths are present.
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
`“Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections. The appliance then merges these connections
`and applies customer policies to the traffic.”
`
`Viptela vEdge routers provide path and application aware routing, taking into account,
`for instance, the loss and latency of the paths.
`
`
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 5
`
`
`
`
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`
`
`
`
`
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 6
`
`
`
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 7
`
`
`
`
`
`Viptela vEdge routers are also capable of selecting paths based on the underlying
`application.
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`
`Viptela, Inc. - Exhibit 1018
`Page 8
`
`
`
`and packet latency, and the load, cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`1[d]. wherein the controller receives a
`packet through the site interface
`and sends the packet through the
`network interface that was
`selected by the packet path
`selector.
`
`Viptela provides a controller that receives a packet through the site interface and sends
`the packet through the network interface that was selected by the packet path selector.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 9
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 10
`
`
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”
`
`
`
`
`
`3.
`
`The controller of claim 1,
`wherein the packet path selector
`selects between network
`
`As described below, Viptela devices include a controller wherein the packet path selector
`selects between network interfaces according to a load-balancing criterion, thereby
`promoting balanced loads on devices that carry packets on the selected path after the
`
`Viptela, Inc. - Exhibit 1018
`Page 11
`
`
`
`interfaces according to a load-
`balancing criterion, thereby
`promoting balanced loads on
`devices that carry packets on the
`selected path after the packets
`leave the selected network
`interfaces.
`
`packets leave the selected network interfaces.
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`Viptela, Inc. - Exhibit 1018
`Page 12
`
`
`
`4.
`
`The controller of claim 1,
`wherein the packet path selector
`selects between network
`interfaces according to a
`reliability criterion, thereby
`promoting use of devices that
`will still carry packets on the
`selected path after the packets
`leave the selected network
`interfaces, when other devices
`on a path not selected are not
`functioning.
`
`
`As described below, Viptela devices include a controller wherein the packet path selector
`selects between network interfaces according to a reliability criterion, thereby promoting
`use of devices that will still carry packets on the selected path after the packets leave the
`selected network interfaces, when other devices on a path not selected are not functioning.
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`Viptela, Inc. - Exhibit 1018
`Page 13
`
`
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`Viptela, Inc. - Exhibit 1018
`Page 14
`
`
`
`Path & Application Aware Routing
`
`“¢ viptela
`
`v Loss
`¥ Latency
`¥ inter
`¥ Load (roadmap)
`
`Z
`
`Revenue generating trattic, requires near 0%loss
`ter a Requires loss < 1%, latency = 200ms
`
`
`300 ms, 1% loss
`
`Internet
`
`5 3. -se-
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 15
`
`Viptela, Inc. - Exhibit 1018
`Page 15
`
`
`
`
`
`See, e.g., Viptela Documentation - Components of Application-Aware Routing at 107
`(VIPFAT0006143):
`
`
`
`5.
`
`The controller of claim 1,
`wherein the controller sends
`packets from a selected network
`interface to a VPN.
`
`
`As described below, Viptela devices include a controller wherein the controller sends
`packets from a selected network interface to a VPN.
`
`
`
`See, e.g., Viptela Documentation - Network Interfaces at 23 (VIPFAT0005807):
`
`“In the Viptela overlay network design, interfaces are associated with VPNs. The
`interfaces that participate in a VPN are configured and enabled in that VPN. Each
`
`Viptela, Inc. - Exhibit 1018
`Page 16
`
`
`
`interface can be present only in a single VPN .
`
`For each network interface, you can configure a number of interface-specific
`properties, such as DHCP clients and servers, VRRP, interface MTU and speed,
`and PPPoEAt a high level, for an interface to be operational, you must configure
`an IP address for the interface and mark it as operational (no shutdown). In
`practice, you always configure additional parameters for each interface.”
`
`See, e.g., Viptela Documentation - Transport-Side NAT Operation at 153
`(VIPFAT0006187):
`
`“We use the following figure to explain how the NAT functionality on the vEdge
`router splits traffic into two flows (or two tunnels) so that some of it remains
`within the overlay network and some goes directly to the Internet or other public
`network.
`
`In this figure, the vEdge router has two interfaces:
`
`
`
`• Interface ge0/1 faces the local site and is in VPN 1. Its IP address is 10.1.12.0/24.
`
`Viptela, Inc. - Exhibit 1018
`Page 17
`
`
`
`• Interface geO/O faces the transport cloud and is in VPN 0 (the transport VPN).
`Its IP address is 192.23.100.0/24, and it uses the default OMP port number, 12346,
`for overlay network tunnels.”
`
`See, e.g., Viptela Documentation - Transport-Side NAT Operation at 154
`(VIPFAT0006188):
`
`“Once NAT is enabled on the vEdge router, data traffic affected by the centralized
`data policy (here, the data traffic from VPN 1) is split into two flows:
`
`• Traffic destined for another vEdge router in the overlay network remains in VPN
`1, and it travels directly through the IPsec data plane tunnel from the source vEdge
`router to the destination vEdge router. This traffic never passes through VPN 0,
`and therefore it is never touched by NAT.
`
`• Traffic destined for the public network passes from VPN 1 to VPN 0, where it is
`NATed. During the NAT processing, the source IP address is changed from
`10.1.12.0/24 to that of geO/O, 192.23.100.0/24, and the source port is changed to
`1024.”
`
`“On a vEdge router, you can configure NAT on the service side of the router so
`that data traffic traverses the NAT before entering the overlay tunnel that is located
`in the transport VPN. The service-side NAT performs NAT to mask the IP address
`of data traffic it receives.”
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”
`
`As described below, Viptela devices include a controller wherein the controller sends
`
`6.
`
`The controller of claim 1,
`wherein the controller sends
`
`Viptela, Inc. - Exhibit 1018
`Page 18
`
`
`
`packets from a selected network
`interface to a point-to-point
`private network connection.
`
`packets from a selected network interface to a point-to-point private network connection.
`
`See Viptela vEdge Cloud Data Sheet at 1 (VIPFAT0004627):
`
`“Transport independent nature of the Vipteia SD-WAN solution allows leveraging
`variety of connectivity methods in the active-active fashion by securely extending
`SD-\MAN fabric into the public cloud environment across all underlying transport
`networks, such as MPLS, broadband, 3G/4G LTE, satellite and point-to-point
`links.”
`
`7.
`
`A method for combining
`connections for access to
`disparate parallel networks, the
`method comprising the steps of:
`
`As shown below, the accused Viptela devices practice a method for combining
`connections for access to multiple parallel disparate networks.
`
`See Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 19
`
`
`
`7[a].
`
`receiving at a controller a packet
`which has a first site IP address
`as source address and a second
`site IP address as destination
`address;
`
`
`As shown below, the accused Viptela devices receive at a controller a packet which has a
`first site IP address as source address and a second site IP address as destination
`address.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 20
`
`
`
`7[b].
`
`selecting, within the controller
`on a per-packet basis, between a
`path through an Internet-based
`network and a path through a
`private network that is not
`Internet-based; and
`
`
`As shown below, the accused Viptela devices select within the controller on a per-packet
`basis, between a path through an Internet-based network and a path through a private
`network that is not Internet-based.
`
`See, e.g., Viptela Documentation - Deep Packet Inspection at 67 (VIPFAT0006101):
`
`“In addition to examining the network- and transport-layer headers in data packets,
`centralized data policy can be used to examine the application information in the
`data packets' payload . This deep packet inspection offers control over how data
`packets from specific applications or application families are forwarded across the
`network, allowing you to assign the traffic to be carried by specific tunnels. To
`control the traffic flow of specific application traffic based on the traffic loss or
`latency properties on a tunnel, use application-aware routing.”
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`
`Viptela, Inc. - Exhibit 1018
`Page 21
`
`
`
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`Viptela, Inc. - Exhibit 1018
`Page 22
`
`
`
`7[c].
`
`forwarding the packet along the
`selected path toward the second
`site.
`
`
`As described below, the accused Viptela devices forward the packet along the selected
`path toward the second site.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 23
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 24
`
`
`
`See Claim 3.
`
`9.
`
`The method of claim 7, wherein
`the selecting step selects
`between network interfaces
`according to a load-balancing
`criterion, thereby promoting
`balanced loads on devices that
`carry packets on the selected
`path after the packets leave the
`selected network interfaces.
`
`10.
`
`The method of claim 7, wherein
`the selecting step selects
`
`See Claim 4.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 25
`
`
`
`between network interfaces
`according to a reliability
`criterion, thereby promoting use
`of devices that will still carry
`packets on the selected path after
`the packets leave the selected
`network interfaces, when other
`devices on a path not selected
`are not functioning.
`
`The method of claim 7, wherein
`the forwarding step sends
`packets from a selected network
`interface to a VPN.
`
`The method of claim 7, wherein
`the forwarding step sends
`packets from a selected network
`interface to a point-to-point
`private network connection.
`
`A method for controlling access
`to multiple independent
`disparate networks in a parallel
`network configuration, the
`disparate networks comprising at
`least one private network and at
`least one network based on the
`Internet, the method comprising
`the steps of:
`
`11.
`
`12.
`
`13.
`
`See Claim 5.
`
`See Claim 6.
`
`As shown below, the accused Viptela devices practice a method for controlling access to
`multiple independent disparate networks in a parallel network configuration, the
`disparate networks comprising at least one private network and at least one network
`based on the Internet.
`
`See Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 26
`
`
`
`13[a].
`
`receiving a packet through a site
`interface that connects a
`controller to a site;
`
`
`The accused Viptela devices provide a site interface connecting the controller to a site.
`For example, each accused instrumentality includes at least one Ethernet port that
`connects the controller to a LAN. See, e.g., Viptela Documentation - vEdge 100m Router
`(VIPFAT0008018); Viptela Documentation - vEdge 1000 Router (VIPFAT0008055);
`Viptela Documentation - vEdge 2000 Router (VIPFAT0008120); Viptela Secure SD-WAN
`at 52 (VIPFAT0000343).
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 27
`
`
`
`
`
`
`vEdge-1000 Hardware
`
`* viptela
`
`2x USB 3.0 expansion slots (/uture)
`
`
`
`Bx Gigabit Ethemet SFP
`
`Sysiem Status LEDs
`
`i
`
`Ethernet Management Port
`
`USB Console Port
`
`Ethernet Port Status LEDs
`
`SD Card slot
`
`Serial Console Port
`
`
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`See, e.g., Secure Extensible Network Solution Components - Data Components, VIPTELA,
`http://viptela.com/solutions/overview/ (last visited Oct. 19, 2016):
`http://viptela.com/solutions/overview/(last visited Oct. 19, 2016):
`
`“vEdge Routers sit at the perimeter of a site (such as remote offices, branches,
`“vEdge Routerssit at the perimeter of a site (such as remote offices, branches,
`campuses, data centers) and provide highly secure data connectivity over any
`campuses, data centers) and provide highly secure data connectivity over any
`transport.”
`transport.”
`
`See, e.g, Viptela Secure SD-WAN at 8 (VIPFAT0000299):
`See, e.g, Viptela Secure SD-WANat 8 (VIPFAT0000299):
`
`Viptela, Inc. - Exhibit 1018
`Page 28
`
`Viptela, Inc. - Exhibit 1018
`Page 28
`
`
`
`13[b].
`
`selecting between at least two
`network interfaces of the
`controller which use at least two
`known location address ranges
`which are respectively
`associated with disparate
`networks, according to at least: a
`destination of the packet, an
`optional presence of alternate
`paths to that destination, and at
`least one specified criterion for
`
`
`
`Viptela devices practice a method for selecting between at least two network interfaces of
`the controller which use at least two known location address ranges which are
`respectively associated with disparate networks, according to at least: a destination of the
`packet, an optional presence of alternate paths to that destination, and at least one
`specified criterion for selecting between alternate paths when such alternate paths are
`present.
`
`See, e.g., Andrew Conry Murray, Startup Profile: Viptela Targets WAN Cost, Complexity,
`INFORMATIONWEEK (Dec. 2, 2014), http://www.informationweek.com/interop/startup-
`profile-viptela-targets-wan-cost-complexity/a/d-id/1317794.
`
`Viptela, Inc. - Exhibit 1018
`Page 29
`
`
`
`selecting between alternate paths
`when such alternate paths are
`present; and
`
`“Customers place Viptela's hardware appliance, the vEdge router, at each end
`point that needs connectivity. Customers can run multiple connections through
`each appliance, including MPLS and Ethernet circuits and lower-cost options such
`as broadband and LTE connections. The appliance then merges these connections
`and applies customer policies to the traffic.”
`
`Viptela vEdge routers provide path and application aware routing, taking into account,
`for instance, the loss and latency of the paths.
`
`See, e.g., Viptela Secure SD-WAN at 35 (VIPFAT0000326):
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 30
`
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`
`
`
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 31
`
`
`
`
`
`Viptela vEdge routers are also capable of selecting paths based on the underlying
`application.
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`
`
`
`
`13[c].
`
`sending the packet through the
`selected network interface.
`
`As described below, the accused Viptela devices send the packet through the selected
`network interface.
`
`Viptela, Inc. - Exhibit 1018
`Page 32
`
`
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 33
`
`
`
`See Claim 3.
`
`15.
`
`The method of claim 13, wherein
`the method selects between
`network interfaces according to a
`load-balancing criterion, thereby
`promoting balanced loads on
`devices that carry packets on the
`selected path after the packets
`leave the selected network
`interfaces.
`
`16.
`
`The method of claim 13, wherein
`the method selects between
`
`See Claim 4.
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 34
`
`
`
`network interfaces according to a
`reliability criterion, thereby
`promoting use of devices that
`will still carry packets on the
`selected path after the packets
`leave the selected network
`interfaces, when other devices
`on a path not selected are not
`functioning.
`
`The method of claim 13, wherein
`the method sends packets from a
`selected network interface to a
`VPN.
`
`The method of claim 13, wherein
`the method sends packets from a
`selected network interface to a
`point-to-point private network
`connection.
`
`A controller for combining
`connections for access to
`disparate parallel networks, the
`controller comprising:
`
`17.
`
`18.
`
`19.
`
`See Claim 5.
`
`See Claim 6.
`
`As shown below, the accused Viptela devices are controllers for combining connections
`for access to disparate parallel networks.
`
`See, e.g., Viptela Secure SD-WAN at 16 (VIPFAT0000307):
`
`
`Viptela, Inc. - Exhibit 1018
`Page 35
`
`
`
`19[a]. a site interface configured for
`receiving a packet which has a
`first site IP address as source
`address and a second site IP
`address as destination address;
`and
`
`
`As shown below, the accused Viptela devices receive at a controller a packet which has a
`first site IP address as source address and a second site IP address as destination
`address.
`
`See, e.g., Viptela Documentation- Default Behavior without Data Policy at 168
`(VIPFAT0006203):
`
`
`
`
`
`Viptela, Inc. - Exhibit 1018
`Page 36
`
`
`
`19[b]. a packet path selector which
`selects, within the controller on a
`per-packet basis, between a path
`through an Internet-based
`network and a path through a
`private network that is not
`Internet-based;
`
`
`“An outer header is added to the packet. At this point, the packet header has these
`contents: TLOC source address, TLOC destination address, ESP header,
`destination IP address, and source IP address.”
`
`As shown below, the accused Viptela devices select within the controller on a per-packet
`basis, between a path through an Internet-based network and a path through a private
`network that is not Internet-based.
`
`
`
`See, e.g., Viptela Documentation - Deep Packet Inspection at 67 (VIPFAT0006101):
`
`“In addition to examining the network- and transport-layer headers in data packets,
`centralized data policy can be used to examine the application information in the
`data packets' payload . This deep packet inspection offers control over how data
`packets from specific applications or application families are forwarded across the
`network, allowing you to assign the traffic to be carried by specific tunnels. To
`control the traffic flow of specific application traffic based on the traffic loss or
`latency properties on a tunnel, use application-aware routing.”
`
`Viptela, Inc. - Exhibit 1018
`Page 37
`
`
`
`See, e.g., Viptela Documentation - Application-Aware Routing at 107 (VIPFAT0006141):
`
`“Application-aware routing tracks network and path characteristics of the data
`plane tunnels between vEdge routers and uses the collected information to
`compute optimal paths for data traffic. These characteristics include packet loss
`and packet latency, and the load , cost and bandwidth of a link. The ability to
`consider factors in path selection other than those used by standard routing
`protocols-such as route prefixes, metrics, link-state information, and route removal
`on the edge router-offers a number of advantages to an enterprise:
`
`• In normal network operation, the path taken by application data traffic
`through the network can be optimized, by directing it to WAN links that
`support the required levels of packet loss and latency defined in an
`application's SLA.
`
`• In the face of network brownouts or soft failures, performance
`degradation can be minimized. The tracking of network and path
`conditions by application-aware routing in real time can quickly reveal
`performance issues, and it automatically activates strategies that redirect
`data traffic to the best available path. As the network recovers from the
`brownout or soft failure conditions, application-aware routing
`automatically readjusts the data traffic paths.
`
`• Network costs can be reduced because data traffic can be more efficiently
`load-balanced.
`
`• Application performance can be increased without the need for WAN
`upgrades.”
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 21
`(VIPFAT0000607):
`
`Viptela, Inc. - Exhibit 1018
`Page 38
`
`
`
`19[c]. wherein the controller receives a
`packet through the site interface
`and sends the packet through the
`network interface that was
`selected by the packet path
`selector.
`
`
`Viptela provides a controller that receives a packet through the site interface and sends
`the packet through the network interface that was selected by the packet path selector.
`
`See Viptela Secure Extensible Network - Technology Introduction at 26
`(VIPFAT0000612):
`
`Viptela, Inc. - Exhibit 1018
`Page 39
`
`
`
`
`See, e.g., Viptela Secure Extensible Network - Technology Introduction at 20
`(VIPFAT0000606):
`
`Viptela, Inc. - Exhibit 1018
`Page 40
`
`
`
`See Viptela Documentation - Interfaces at 5 (VIPFAT0008347):
`
`“Interfaces on vEdge routers handle control traffic (in VPN 0), data traffic (in
`VPNs other than 0 and 512), and out-of-band management traffic (in VPN 512).
`Interface on vSmart controller and vManage NMSs handle control and
`management traffic.”