Blocking an unauthorised user or taking another corrective action across ethernet virtual private network (evpn) fabric during rapid media access control (mac) movement

A provider edge (PE) device for use in an Ethernet virtual private network (EVPN), the PE device comprising:

• a) at least one processor;
• and
• b) a computer-readable storage medium storing instructions, which when executed by the at least one processor, cause the at least one processor to perform a method including
• 1) receiving a packet including a media access control (MAC) address,
• 2) determining whether or not the MAC address received meets a MAC duplication test, and
• 3) responsive to determining that the MAC duplication test is met,
• A) suppressing a route advertisement of the MAC address to at least one other PE device in the EVPN,
• B) performing a configured corrective action with respect to the MAC address, and
• C) advertising, in a message to the at least one other PE device in the EVPN, that it has determined that the MAC address is a duplicate, and
• otherwise, responsive to determining that the MAC duplication test is not met, sending a route advertisement of the MAC address towards at least one other PE device in the EVPN.

A system for use in an Ethernet virtual private network (EVPN), the system comprising:

• a) a first provider edge (PE) device configured to
• 1) receive a packet including a media access control (MAC) address,
• 2) determine whether or not the MAC address received meets a MAC duplication test, and
• 3) responsive to determining that the MAC duplication test is met,
• A) suppress a route advertisement of the MAC address to at least one other PE device in the EVPN,
• B) perform a first configured corrective action with respect to the MAC address, and
• C) advertise, in a message to the at least one other PE device in the EVPN, that it has determined that the MAC address received meets the MAC duplication test, and
• otherwise, responsive to determining that the MAC duplication test is not met, send a route advertisement of the MAC address towards at least one other PE device in the EVPN;
• and
• b) a second PE device configured to
• 1) receive the message advertised by the first PE device, and
• 2) responsive to receiving the message advertised by the first PE device, perform a second configured corrective action with respect to the MAC address.