7 results about "Provider Edge" patented technology

Ethernet VPN supports All-Active multihoming and an ingress Provider Edge (PE) can load balance traffic to all the egress PEs on a multihoming Ethernet Segment (MHES). Methods, devices, and systems to allow an operator to have the ingress PE load-balance to only a set of the PEs on the MHES are described. In the event that all PEs of the set are not usable (e.g., down, not attached to the ES, etc.), the ingress PE can load balance data traffic to one or more PEs on the MHES that are not in the set.

A system and associated methods provide procedures for establishing multicast connections and forwarding multicast content from a source to a subscriber when an ingress provider edge in communication with the subscriber is connected to an egress provider edge device belonging to an EVPN instance, especially in cases where the egress provider edge device is not receiving content from the source. The system configures “backup” provider edge devices belonging to the EVPN instance to temporarily forward the multicast content to the egress provider edge device on behalf of the source, enabling the ingress provider edge device and subscriber to continue to receive the multicast content from the source while the multicast network adjusts to recognize a new egress provider edge device. Methods of establishing connections between the ingress provider edge device and the correct egress provider edge device are also provided to avoid flooding and inefficient content forwarding throughout the network.

Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.

The present disclosure describes a device, computer-readable medium, and method for multifactor authentication using network address translation data. A method performed by a processing system includes receiving, from a host device in a communication network, a request to authenticate a user, wherein the request includes a purported identity of the user and a public internet protocol address assigned to a user endpoint device from which a request to access a resource at the host device was sent, querying a provider edge server for a verification that the purported identity matches an identity associated with a private internet protocol address that is mapped to the public internet protocol address, receiving a first response from the provider edge server, determining whether to authenticate the user based on the first response from the provider edge server, and sending a second response to the host device indicating a result of the determining.

In one embodiment, a method includes receiving, by a route reflector, a subscription request from a first provider edge node in a network and generating a subscription policy for the first provider edge node. The method also includes receiving a first Ethernet Virtual Private Network (EVPN) Type 2 Route from a second provider edge node, assigning a sequence number to the first EVPN Type 2 Route, and communicating the first EVPN Type 2 Route with the sequence number to the first provider edge node. The method further includes receiving a second EVPN Type 2 Route from a third provider edge node, generating an updated sequence number in response to receiving the second EVPN Type 2 Route from the third provider edge node, and communicating the second EVPN Type 2 Route with the updated sequence number to the first provider edge node and the second provider node.

Provided in the embodiments of the present disclosure are a method and apparatus for receiving border gateway protocol routing, and a method and apparatus for sending border gateway protocol routing, and a storage medium. The receiving method includes: Virtual Private Network (VPN) service routing is received by a first Provider Edge (PE) device in a first domain from a second PE device in a second domain, where the VPN service routing includes an address of the second PE device; an Outbound Route Filtering (ORF) entry strategy is generated by the first PE device according to the VPN service routing, and the ORF entry strategy is sent to a border device, where the ORF entry strategy includes the address of the second PE device; and Border Gateway Protocol (BGP) routing matching the ORF entry strategy and sent by the border device is received by the first PE device.

One or more encapsulated tunnel aggregator devices are distributed across the provider's network. The tunnel aggregator devices may receive clean return traffic from managed security routers (MSRs) and route the traffic through encapsulated tunnels to customer endpoints, thereby reducing the routing load on the MSRs. The tunnel aggregator devices may be deployed physically or logically close to the MSRs, which can facilitate routing return traffic from the MSRs to the tunnel aggregator devices for final transmission to customer endpoints. In other examples, tunnel aggregator devices may be deployed close to other provider network resources, such as provider edge routers.