VPN Route Distinguishers Using MAC Addresses to Prevent Duplicates

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In software defined networking systems, duplicate virtual private network (VPN) routes generated by different SDN clusters with the same subnet addresses can cause routing disruptions and improper traffic forwarding due to the lack of unique identification of routes.

Innovation Solution

Generate route distinguishers based on layer two physical hardware addresses, such as MAC addresses, rather than network addresses, to uniquely identify VPN routes and avoid duplicates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If route distinguishers are generated based on network addresses (IP addresses) of compute nodes, then routing information can be generated using standard network addressing, but duplicate routes are created across different SDN clusters causing routing disruptions

Engineering Contradiction:

ImproveEase of generating route distinguishersVSAvoidRoute uniqueness and forwarding reliability

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The patent changes the parameter used for generating route distinguishers from network layer addresses (IP addresses) to data link layer addresses (MAC addresses). This parameter change ensures global uniqueness across different SDN clusters while maintaining the ease of automated generation. The MAC address, being a hardware identifier, inherently provides uniqueness that IP addresses cannot guarantee across distributed clusters.

Inventive Principle:

Principle #35Parameter changes

2Adaptability or versatility

If SDN clusters use the same subnet addresses for different virtual networks, then network address planning is simplified, but routing ambiguity occurs making it impossible to distinguish between routes from different clusters

Engineering Contradiction:

ImproveNetwork address reuse flexibilityVSAvoidRoute distinction difficulty

Core Design Contradiction:

Adaptability or versatilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent introduces an additional dimension for route identification by incorporating the data link layer (MAC address) into the route distinguisher, complementing the existing network layer (IP address) information. This dimensional addition allows routes with identical subnet addresses from different SDN clusters to be distinguished through their unique MAC addresses, resolving the routing ambiguity while preserving address reuse flexibility.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

3Ease of operation

If IP addresses are used for route identification, then network layer routing protocols can be used, but global uniqueness cannot be guaranteed across distributed SDN clusters

Engineering Contradiction:

ImproveCompatibility with standard routing protocolsVSAvoidRoute identification precision

Core Design Contradiction:

Ease of operationVSMeasurement precision

Solution Approach 1:

The patent introduces the MAC address as an intermediary element that bridges the gap between standard IP-based routing protocols and the need for global uniqueness across distributed clusters. The MAC address serves as a mediator that preserves compatibility with existing routing infrastructure while providing the additional uniqueness guarantee needed for multi-cluster environments through the route distinguisher mechanism.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12542739B2Generating route distinguishers for virtual private network addresses based on physical hardware addresses

Publication Date: 2026.02.03 JUNIPER NETWORKS INC

AI summary

This disclosure describes techniques for improving route advertisements. In one example, a method includes generating, by a network device, a virtual private network address comprising a route distinguisher value and a network address associated with a compute node, the route distinguisher value based on a layer two physical hardware address of the compute node, and outputting, by the network device, a virtual private network route that includes the virtual private network address.