Method and apparatus for virtual overlay networks

A method of routing a packet in a network, the packet belonging to a virtual private network (VPN) and having a label that includes a virtual private network identifier (VPN-ID) according to the Multiprotocol Label Switching (MPLS) standard and a forwarding label, the method comprising:

• a) maintaining a first forwarding table corresponding to a first virtual private network;
• b) maintaining a second forwarding table corresponding to a second virtual private network;
• and
• c) routing the packet based on an association between the VPN-ID, the forwarding label, and one of the first forwarding table and the second forwarding table.

A network comprising:

• a) a first edge router configured to route a packet through a wide area network cloud, the packet belonging to a virtual private network (VPN), having a label that includes a virtual private network identifier (VPN-ID) according to the Multiprotocol Label Switching (MPLS) standard, and a second label identifying forwarding table corresponding to the virtual private network, the forwarding table including a portion of the route table;
• b) a backbone router configured to receive the packet and route the packet based on a route table associated solely with the VPN-ID, from among one or more separate route tables, each table associated with a different VPN;
• and
• c) a second edge router configured to receive the packet.

A method of routing a packet belonging to a virtual private network (VPN) and having a label that includes a virtual private network identifier (VPN-ID) according to the Multiprotocol Label Switching (MPLS) standard and a forwarding label corresponding to a forwarding table, the method comprising:

• a) receiving the packet;
• b) identifying a rotting table associated with the VPN from among multiple separate routing tables associated with different VPNs;
• and
• c) facilitating routing of the packet to the VPN.

A method of routing a packet belonging to a virtual private network (VPN) and having a label that includes a virtual private network identifier (VPN-ID) according to the Multiprotocol Label Switching (MPLS) standard in a first label in a header, the method comprising:

• a) receiving the packet;
• b) identifying a route table associated with the VPN from among multiple separate route tables associated with different VPNs;
• c) identifying, from a second label, a forwarding table corresponding to the VPN, the forwarding table including a portion of the route table;
• and
• d) facilitating routing of the packet to the VPN.