Techniques for zero touch provisioning of edge nodes for a virtual private network

A method for configuring a network interface on an intermediate network node at an edge of a provider network to support a virtual private network, comprising the steps of:

• determining on a particular node at an edge of a provider network whether conditions are satisfied for configuring a particular interface on the particular node for a virtual private network over the provider network;
• if it is determined that conditions are satisfied, then sending, to a first server on a first host computer of the provider network, interface identification data that uniquely indicates the particular interface;
• in response to sending the interface identification data, receiving configuration data from a second server on a second host computer of the provider network;
• and
• configuring the particular interface for the virtual private network based on the configuration data without human intervention,
• wherein
• the provider network is a packet-switched network;
• the particular virtual private network is a link layer virtual private network;
• the particular node is different from the first host and the second host;
• and
• the particular interface is for a direct communication link to a customer network node outside the provider network.

An apparatus for configuring a network interface on an intermediate network node at an edge of a provider network to support a virtual private network, comprising the steps of:

• means for storing configuration data at a server on a host computer on a provider network,
• means for determining whether conditions are satisfied for sending the configuration data to a particular node at an edge of the provider network;
• and
• means for sending the configuration data to the particular node to cause the particular node to configure a particular interface without human intervention for a particular virtual private network over the provider network based on the configuration data, if it is determined that conditions are satisfied for sending the configuration data,
• wherein:
• the provider network is a packet-switched network;
• the particular virtual private network is a link layer virtual private network;
• the particular node is different from the host;
• and
• the particular interface is for a direct communication link to a customer network node outside the provider network.

An apparatus for configuring a network interface on an intermediate network node at an edge of a provider network to support a virtual private network, comprising the steps of:

• means for determining on a particular node at an edge of a provider network whether conditions are satisfied for configuring a particular interface on the particular node for a virtual private network over the provider network;
• means for sending, to a first server on a first host computer of the provider network, interface identification data that uniquely indicates the particular interface, if it is determined that conditions are satisfied;
• means for receiving configuration data from a second server on a second host computer of the provider network, in response to sending the interface identification data;
• and
• means for configuring the particular interface for the virtual private network based on the configuration data without human intervention,
• wherein
• the provider network is a packet-switched network;
• the particular virtual private network is a link layer virtual private network;
• the particular node is different from the first host and the second host;
• and
• the particular interface is for a direct communication link to a customer network node outside the provider network.

An apparatus for configuring a network interface on an intermediate network node at an edge of a provider network to support a virtual private network, comprising:

• a network interface that is coupled to a provider network for communicating therewith a data packet;
• one or more processors;
• a computer-readable medium;
• and
• one or more sequences of instructions stored in the computer-readable medium, which, when executed by the one or more processors, causes the one or more processors to carry out the steps of:
• storing configuration data;
• determining whether conditions are satisfied for sending the configuration data to a different node at an edge of the provider network;
• and
• if it is determined that conditions are satisfied for sending the configuration data, then sending the configuration data to the different node to cause the different node to configure a particular interface without human intervention for a particular virtual private network over the provider network based on the configuration data,
• wherein:
• the provider network is a packet-switched network;
• the particular virtual private network is a link layer virtual private network;
• and
• the particular interface is for a direct communication link to a customer network node outside the provider network.

An apparatus for configuring a network interface on an intermediate network node at an edge of a provider network to support a virtual private network, comprising:

• a provider network interface that is coupled to a provider network for communicating therewith a data packet;
• a customer network interface for coupling to customer premises equipment outside the provider network for communicating therewith a data packet;
• one or more processors;
• a computer-readable medium;
• and
• one or more sequences of instructions stored in the computer-readable medium, which, when executed by the one or more processors, causes the one or more processors to carry out the step of:
• determining whether conditions are satisfied for configuring a particular interface on the customer network interface for a virtual private network over the provider network;
• if it is determined that conditions are satisfied, then sending, to a first server on a first host computer of the provider network, interface identification data that uniquely indicates the particular interface;
• in response to sending the interface identification data, receiving configuration data from a second server on a second host computer of the provider network;
• and
• configuring the particular interface for the virtual private network based on the configuration data without human intervention,
• wherein
• the provider network is a packet-switched network,
• the particular virtual private network is a link layer virtual private network, and
• the apparatus is different from the first host computer and the second host computer.