System and method for securing an ethernet connectivity fault management (CFM) domain defined on a VLAN

A system for securing an Ethernet Connectivity Fault Management (CFM) domain defined on a Virtual Local Area Network (VLAN), comprising:

• a boundary Maintenance End Point (MEP) node of said Ethernet CFM domain, wherein said boundary MEP operating responsive to registering by an external port with said VLAN whereby said VLAN is extended to include said external port, monitors frame flow through said boundary MEP node in order to determine if bidirectional control frame flow is observed between said Ethernet CFM domain and extended portion of said VLAN including said external port, wherein bidirectional control frame flow includes control frame flow transmitted from said Ethernet CFM domain to the external port, and responsive to determining that there is no bidirectional control frame flow through said boundary MEP node, for generating an alarm indicative of a potential breach of said Ethernet CFM domain by said external port.

A network node operable in an Ethernet Connectivity Fault Management (CFM) domain defined on a Virtual Local Area Network (VLAN), comprising:

• a structure, operable responsive to registering by an external port with said VLAN whereby said VLAN is extended to include said external port, for determining if bidirectional control frame flow is observed at said network node, wherein bidirectional control frame flow includes control frame flow between the VLAN and the external port;
• and
• a structure, operable responsive to determining that there is no bidirectional control frame flow between the VLAN and the external port through said network node, for generating an alarm indicative of a potential breach of said Ethernet CFM domain by said external port.