Scaling private virtual local area networks (VLANs) across large metropolitan area networks (MANs).

A method for extending a Private Virtual Local Area Network (VLAN) across a computer network, the computer network organized into a plurality of administrative groups interconnected by an interconnect fabric, the method comprising the steps of:

• associating the Private VLAN with a plurality of Provider Equipment VLANs (PE-VLANs) within the plurality of administrative groups;
• each PE-VLAN associated with a different PE-VLAN Identifier (ID);
• associating a Virtual Ethernet Connection (VEC) with the plurality of PE-VLANs by mapping a PE-VLAN ID in each administrative group to a VEC identifier associated with the VEC;
• identifying a network message within the Private VLAN;
• associating the network message with the VEC by including the VEC identifier in an encapsulation header appended to the network message;
• sending the network message to the interconnect fabric;
• and
• receiving the network message at a given administrative group of the plurality of administrative groups, the given administrative group to associate the network message with the PE-VLAN ID of a given PE-VLAN of the plurality of PE-VLANs, wherein the given PE-VLAN is associated with the VEC and with the Private VLAN.

An intermediate network device configured to extend a Private Virtual Local Area Network (VLAN) across a computer network, the computer network organized into a plurality of administrative groups interconnected by an interconnect fabric, the intermediate network device comprising:

• a first port adapted to receive a network message within the Private VLAN;
• a memory adapted to store an association between the Private VLAN and a Provider Equip VLAN (PE-VLAN) associated with a PE-VLAN identifier (ID), for use within one or more of the plurality of administrative groups, and further adapted to store an association between the PE-VLAN and a second port, wherein the second port corresponds to an end point of a Virtual Ethernet Connection (VEC);
• and
• a processor adapted to associate the network message with the VEC by mapping a PE-VLAN ID to a VEC identifier associated with the VEC and including the VEC identifier:
• in an encapsulation header appended to the network message, and further adapted to transmit the network message from the second port.

A computer readable medium containing computer executable program instructions for extending a Private Virtual Local Area Network (VLAN) across a computer network, the computer network organized into a plurality of administrative groups interconnected by an interconnect fabric, the executable program instructions comprising program instructions adapted to:

• identify a network message within the Private VLAN;
• store an association between the Private VLAN and a Provider Equipment VLAN (PE-VLAN) for use within one or more of the plurality of administrative groups;
• the PE-VLAN associated with a PE-VLAN Identifier (ID);
• store an association between the PE-VLAN and a second port, wherein the second port corresponds to an end point of a Virtual Ethernet Connection (VEC);
• associate the network message with the VEC by mapping a PE-VLAN ID to a VEC identifier associated with the VEC and including the VEC identifier in an encapsulation header appended to the network message;
• and transmit the network message from the second port.