188 results about "Virtual Private LAN Service" patented technology

A method for data broadcast over a network includes receiving at a virtual bridge a data packet to be flooded over the network, and passing the data packet from the virtual bridge to a multicast-capable router, along with a broadcast indication. Responsive to the broadcast indication, the router determines a group of destination addresses to which the packet should be multicast, and creates copies of the packet for transmission over the network to the destination addresses in the group.

A VPLS model is implemented in a network-facing provider edge (n-PE) device configured to receive a packet from an access network; the packet having a first Virtual Local Area Network (VLAN) tag of a first predetermined bit length. The n-PE device mapping the service instance identifier of the first VLAN tag into a second VLAN tag of a second predetermined bit length greater than the first predetermined bit length, the second VLAN tag identifying a Virtual Private LAN Service (VPLS) instance. The n-PE device then sends the packet with the second VLAN tag across a service provider (SP) core network via a pseudowire (PW) that functions as a logical link to another PE device. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. 37 CFR 1.72(b).

A provider edge device, associated with a virtual private local area network service (VPLS) system, includes a memory to store instructions to implement a pseudowire mechanism to receive a first data frame from a source customer edge (CE) device associated with the VPLS system, incorporate the first data frame into a first VPLS packet, determine whether the source CE device is a single-homed CE device or a multi-homed CE device, and incorporate, into the first VPLS packet, a first pseudowire label, if the source CE device is a single-homed CE device, and incorporate, into the first VPLS packet, a second pseudowire label, different from the first pseudowire label, if the source CE device is a multi-homed CE device; and a processor to execute the instructions.

Data mirroring in a service such as a virtual private LAN service is disclosed. Data packets, segments, frames, or other forms of encapsulation may be mirrored off of a core network (e.g., IP, TCP) to one or more mirroring destinations without using a parallel network. Encapsulation techniques are provided that enable packets to be mirrored and transmitted across services such as VPLS, MPLS, and others to a mirror destination. Once received at the mirror destination, mirrored packets may be used for troubleshooting in a more efficient and less resource and time-consuming manner.

The invention provides for a method for accessing a virtual private network over a packet switched network, the method comprising sending, by a provider edge router, network labelling information about data packet labels to a network access device using a layer 2 network protocol. The method may be performed for accessing a hierarchical Virtual Private LAN Service network using a link layer distribution protocol as signalling protocol for Multi-Protocol Label Switching labels attached to data packets of the packet switched network.

A system and method for multi-nodal APS (MN-APS) protection switching for a virtual private LAN service (VPLS) using a redundant pair of PE (provider edge) nodes is provided. In the event of an APS switchover, the previously active node of the redundant pair sends explicit requests to the other provider edge nodes to flush their MAC address entries that they had previously learned through the previously active node, facilitating quicker re-convergence and reduction of black-holing.

A data communication network includes a plurality of primary virtual bridges, interconnected by primary virtual connections so as to transmit and receive data packets over the network to and from edge devices connected thereto. One or more backup virtual bridges, each associated with at least one of the primary virtual bridges, are connected by at least one secondary virtual connection to at least another one of the primary virtual bridges, so that upon a failure of one of the primary virtual bridges with which it is associated, the backup virtual bridge transmits and receives the data packets over the network via the at least one secondary virtual connection in place of the at least one of the primary virtual bridges.

Methods and apparatuses are disclosed for interworking a first protocol, e.g., Provider Backbone Bridge Traffic Engineering (PBB-TE), that provides Ethernet carrier-class traffic engineering, with a second protocol, e.g., Virtual Private LAN Service, that emulates local area network (LAN) service. Unicast, multicast, and broadcast transmissions are enabled across an Ethernet aggregation network and an MPLS core network. Dual homing protection and end-to-end traffic engineering with adjustable granularity are also provided. These capabilities are not available with traditional PBB-TE networks or with an interworking between PBB and VPLS that has been previously proposed. Embodiments of the invention terminate a PBB-TE tunnel at a user-facing provider edge (UPE) node and attach instance service identifiers (ISIDs) to different virtual switching instances (VSI)s. As a result, inexpensive Ethernet-only aggregation networks can be designed to interoperate with VPLS with increased reliability and control, benefiting service providers and end users.

Methods and apparatuses are disclosed for configuring a Provider Backbone Bridge (PBB) interface within Virtual Private LAN Service using Multi-Protocol Border Gateway Protocol (MP-BGP). Previously, the only ways to enable PBB interfaces for transmission were by learning, which poses security and scalability concerns due to flooding, or by manual configuration, which is impractical for large networks. Embodiments of the present invention enable custom topologies to be built in a controlled manner, which has not previously been possible for PBB over VPLS. By using MP-BGP messages to exchange PBB interface information between nodes, peering relationships are established, and communities may be built with any desired topology. Previously, PBB has only been used as a connectionless bridge; embodiments of the present invention use PBB as a connection between edge nodes. Network designers are provided increased flexibility, and security and congestion are improved, benefiting end users.

A method of processing traffic in a Virtual Private LAN service includes replacing a MAC address from a packet with a realm specific Virtual Private Network address. The packet with the realm specific Virtual Private Network address is then processed.

A method, device, and system for providing multipoint network services over a ring topology network. According to the disclosed method point-to-point connections and point-to-multipoint connections are established between network elements (NEs) providing the same network services. These connections eliminate the need for replicating packets at a source NE and, as a result, the bandwidth utilization is significantly improved. In one embodiment of this invention the multipoint network services provided by the present invention is a virtual private LAN service (VPLS).

A method of peer interfacing a Link-State controlled network domain with an Ethernet Bridging controlled network domain. A pair of peer attachment points are provided between the Link-State controlled network domain and the Ethernet Bridging domain. The peer attachment points are respective endpoints of a set of one or more LAN segments defined within the Ethernet Bridging domain. The set of LAN segments are represented as a virtual node in the Link-State controlled network domain. The virtual node is represented in the Link-State controlled network domain as connected to each of the peer attachment points via a respective virtual link. The virtual links are configured such that frames to or from an address in the Link-State controlled network domain are forwarded over a tree passing through only one of the peer attachments points.

The invention relates to a treatment method for virtual private LAN service (VPLS) messages, comprising the following steps: after an internet protocol (IP) message is received by first UPE equipment, a source medial access control (MAC) address in a corresponding Ethernet message is replaced by an MAC address of the first UPE equipment, Ethernet message is forwarded according to an MAC forwarding table, after the Ethernet message is received by second UPE equipment, an Ethernet encapsulation is decapsulated, the corresponding target MAC address is inquired in an address resolution protocol (ARP) table, Ethernet encapsulation is newly carried out and the Ethernet message is forwarded. The invention also relates to a VPLC network message treatment system and UPE equipment; the source MAC address in the Ethernet message is replaced by adopting the MAC address of the UPE equipment at a forwarding end, and the Ethernet message is forwarded so as to ensure that the UPE equipment and NPE equipment used in the Ethernet message forwarding process can not learn the MAC address of non-local CE equipment, thereby the amount of MAC list items in the UPE and the NPE is reduced and the problem of low efficiency caused by the MAC-in-MAC encapsulation is avoided.

This invention is applicable to a Virtual Private LAN service built using multiple point-to-point Ethernet services from a network operator, where the bridging and the transport / tunneling of Ethernet frames to a remote site are decoupled. The learning bridge function (including MAC address learning and flooding) is performed at customer equipment CE devices, while the tunneling is performed at provider edge PE nodes. The models described here for this VPN refer to hub redundancy, site-to-site SLA guarantees and address discovery in the case of hybrid connections.

A method for implementing Ethernet service, comprising configuring a bridged network to support virtual private LAN services (VPLS), is disclosed.

The invention discloses a multicast data forwarding method and a device thereof, applied to a VPLS (Virtual Private LAN Service) system containing PEs (Provider Edge). The method comprises the following steps of: acquiring multicast addition information by a PE through monitoring a group management packet, establishing a multicast forwarding table entry and submitting the multicast addition information, wherein the multicast forwarding table entry comprises a multicast address and a corresponding output port which is a port at the AL (Access Link) side of multicast virtual connection or localPE. When the PE receives the multicast data sent to the multicast address, the multicast data is forwarded through the output port corresponding to the multicast address according to the established multicast forwarding table entry. The invention can be adopted to reduce the link bandwidth occupied by forwarding the multicast data.

A data communication network includes a plurality of primary virtual bridges, interconnected by primary virtual connections so as to transmit and receive data packets over the network to and from edge devices connected thereto. One or more backup virtual bridges, each associated with at least one of the primary virtual bridges, are connected by at least one secondary virtual connection to at least another one of the primary virtual bridges, so that upon a failure of one of the primary virtual bridges with which it is associated, the backup virtual bridge transmits and receives the data packets over the network via the at least one secondary virtual connection in place of the at least one of the primary virtual bridges.

The invention discloses a method and a device for learning MAC addresses in VPLS networks. The method includes that a first preinstallation environment (PE) is any local virtual switch interface (VSI), and a first VSI only distributes a first VSI label which informs a binding relationship between the first VSI and the first VSI label to a second PE in a unicast mode; and the first PE learns a first MAC address from a first access controller (AC) associated with the first VSI and sends a first MAC notification message carrying the first MAC address and used for indicating a first forward error correction (FEC) message of first (packet writing) PW to the second PE in a unicast mode, so that the second PE can add an MAC forwarding entry corresponding to the first MAC address in an MAC address forwarding table of a second VSI, an output interface corresponding to the first MAC address in the MAC forwarding entry is the first PW indicated by the first FEC, and the first PW is a PW between the first PW and the first VSI. According to the method and the device for learning MAC addresses in VPLS networks, label resources are saved greatly.

The present invention discloses a method, system and device for removing Media Access Control (MAC) addresses. The method includes: sending, by a first User-facing Provider Edge (UPE), a MAC Address Withdraw message, when a handover happens on an access network; receiving, by a network provider edge (NPE), the MAC Address Withdraw message; and removing, by the NPE, a Backbone Media Access Control (B-MAC) address table corresponding to a Virtual Private LAN Service (VPLS) network and forwarding the MAC Address Withdraw message, if the message carries no specific identifier; or directly forwarding, by the NPE, the MAC Address Withdraw message, if the message carries a specific identifier. In the present invention, a specific identifier is added to a MAC Address Withdraw message so as to avoid unnecessary MAC address learning by NPE and UPE devices and to reduce the impact, caused by MAC address learning, on network devices.

Encryption of Ethernet / IEEE 802.3 packet data units (PDUs) at the edge of the enterprise network, in such a way as to support resilient Virtual Private LAN Services (VPLS) network designs. The Ethernet traffic is securely tunneled within encrypted Ethernet tunnels from the edge to the edge of the enterprise network. The encrypted Ethernet traffic is also tunneled within Multi-Protocol Layer Switching (MPLS) tunnels from the edge to the edge of the service provider network. The enterprise network thus manages its own Ethernet site-to-site Virtual Private Network (VPN). The service provider thus independently manages its own MPLS network. The result provides a VPLS or Layer 2 MPLS VPN to the enterprise; the enterprise Ethernet encrypted network can thus be considered as an overlay to the MPLS service provider network.

The invention provides an MAC (Multi-Access Computer) addresses learning method in a virtual private local area network service (VPLS) network, which is applied to a provider edge (PE) router. The method comprises the following steps of: setting a source MAC address learned from a received access control (AC) side message and a source MAC address learned from a received far-end pseudo wire (PW) side message with a known unicast MAC as a target MAC address to be related MACs, and setting the ageing time of a table entry of the related MACs to be normal ageing time; and setting a source MAC address learned from the received PW side message, with the target MAC address being broadcast, multicast or unknown unicast, to be an unrelated MAC, and setting the ageing time of the table entry of theunrelated MAC to be preset time, wherein the preset time is smaller than the normal ageing time. In the invention, the utilization rate of an MAC forwarding table in the VPLS network can be improved,and the occupation of unrelated MAC table entries can be reduced.

The invention discloses one method and system for one city zone Ethernet reliability process, which comprises the following steps: establishing one virtual router redundant agreement set by two business control gates and separately establishing interface device and virtual router agreement gate connection through virtual special local net; according to the process results, determining virtual router main backup business control gate and establishes business control gate and interface for process.

The invention provides a method of transmitting and receiving message and a provider edge router (PE), wherein the method of transmitting and receiving message is applied to virtual private LAN service (VPLS) network, and in the VPLS network, at least one interface type of the interfaces between a second PE and a CE direct connected with the PE is non-Ethernet interface, and at least one interface type of the interfaces between a first PE and a CE direct connected with the PE is Ethernet interface. The method includes: a second PE exchanges private network tags with a first PE; the second PE receives an address resolution protocol (ARP) request from the resource CE that encapsulates the private network tags, and return a medium access control (MAC) address of the second PE to the resource CE; the second PE receives a Ethernet message encapsulated with the private network tags from the resource CE by the first PE, and re-encapsulates the Ethernet message according to the type of the non-Ethernet interface then transmits the message to destination CE. The invention can support various kinds of link interface between the PE and the CE and expand application flied of the VPLS network.

The invention provides a method and a device for flow switching in virtual private local area network service (VPLS) network, wherein a master pseudo-wire (PW) and a backup PW connected with user-oriented provider edge equipment (UPE) are disposed in the VPLS network. The method comprises: adding virtual switching instances (VSI) adopting the same master and backup PWs into a fast switching group in advance and respectively establishing forwarding table entries pointing to the master and backup PWs for each VSI; when the master PW in the fast switching group normally operates, controlling each VSI in the fast switching group to forward a message by the forwarding table entry pointing to the master PW; and when detecting that the master PW fails, controlling each VSI in the fast switching group to forward the message by the forwarding table entry pointing to the backup PW. The invention can largely shorten time for flow switching and ensure carrier-grade fast switching time of 50ms.

A method and apparatus that proxies connectivity check messages and sends fault state changes messages across an MPLS / VPLS network is described. A network element proxies connectivity check messages for remote maintenance endpoints based on a local database. The network element updates the database based on received fault state change message that identify a fault state change of a remote maintenance endpoint. The network element detects fault state changes of local maintenance endpoints and sends a fault state change message to other network elements that proxy connectivity check message for the local maintenance endpoints.

The invention discloses a virtual private LAN service (VPLS) communication method and a device, which relate to provider edge equipment (PE). The method comprises the following steps: assigning the same VLAN for VPNs requiring the realization of interconnection after the configuration of a plurality of VPNs by the PE, and using the internal VLAN as a mark of a broadcasting domain; checking the VLAN inside the VPN when receiving the massage of the VPN by the PE, and transferring or broadcasting the massage according to the internal VLAN and the target MAC of the message; and carrying out MAC address study and / or MAC drift processing according to the internal VLAN and the source MAC of the message. The invention can conveniently realize the intercommunication between the VPNs in the VPLS network, and the building flexibility of the VPLS network is improved, so the diversification requirement of users can be met.

The invention provides a method and a device for processing message, wherein the method comprises the steps of finding a Multi-Address Call (MAC) transmission table in the received message based on an source MAC address and a target MAC address, determining an input interface ID and an output interface ID; performing following operations for every determined output interface ID: finding a preset action matrix, determining processing actions corresponding to combinations of the input interface ID and present output interface ID and performing the determined processing action for the message in the output interface corresponding to the present output interface ID, wherein the action matrix comprises processing actions corresponding to combinations of the input interface ID and output interface ID. According to the invention, the invalid broadcasting problem of the message in the Hub-Spoken networking and star-shaped Provider Backbone Bridge (PBB) networking of the Virtual Private LAN Service (VPLS) can be inhibited effectively.

The invention discloses a network isolation method in a VPLS (Virtual Private LAN Service) and a device thereof. The network isolation method comprises the following steps: configuring a local isolation set on a PE (Portable Executable) device; adding local ACs (Attachment Circuits) of the PE device, which belong to the same VPLS example but are needed to be isolated, into the same local isolation set; and in a message forwarding process, limiting the forwarding of the message on the basis of a VPLS source filter principle when a message output interface AC and a message input interface AC belong to the same local isolation set, thereby realizing the isolation among the local ACs of the PE device. In the invention, a global insulation set is respectively arranged on PE devices at the local and an opposite end; ACs which are on the PE devices at the local end and the opposite end, belong to the same VPLS example but are needed to be isolated are added to the same global isolation set; and in a message forwarding process, on the basis of the VPLS source filter principle, the forwarding of the message is limited when a message output interface AC and a message input interface AC belong to the same global isolation set on the PE device at a message receiving end, thus the isolation between a local AC and a far-end AC of the PE device.