Method and apparatus for internet protocol (ip) logical wire security

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code for one or more programs,
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
• determine a logical configuration of a network comprising a plurality of links connecting a plurality of nodes;
• determine a physical path corresponding to one of the links, the physical path including a plurality of switches of the network, wherein the apparatus is configured to determine whether data sent on one of the nodes to another one of the nodes by the one link is received at the other node;
• receive an error detection value computed by a first switch of the switches;
• and
• compare the error detection value with a value inaccessible to the first switch.

A method comprising:

• receiving, at a switch, network traffic comprising datagrams;
• determining, by the switch, a header of one of the datagrams, the header indicating a destination address;
• selecting, by the switch, a physical link to transport the one datagram based on the destination address;
• determining, by the switch, a network node to forward the one datagram based on the destination address;
• forwarding, by the switch, the one datagram to the network node on the physical link;
• computing, at the switch, an error detection value for the switch;
• and
• forwarding the error detection value to a processing device to determine whether the error detection value corresponds to a value inaccessible to the switch.

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code for one or more programs,
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
• receive network traffic comprising datagrams;
• determine a header of one of the datagrams, the header indicating a destination address;
• select a physical link to transport the one datagram based on the destination address;
• determine a network node to forward the one datagram based on the destination address;
• forward the one datagram to the network node on the physical link;
• compute an error detection value for the apparatus;
• and
• forward the error detection value to a processing device to determine whether the error detection value corresponds to a value inaccessible to the apparatus.