Automatic packet protection forwarding to an MPLS network by a dual-homed ethernet bridge

A system having means for performing a method for forwarding Ethernet packets by an Ethernet bridge in an Ethernet Layer 2 VPN network, comprising:

• connecting at least two customer edge devices (CE devices) having respective MAC addresses, wherein
• at least two CE devices comprise at least one transmitting CE device and at least one receiving device in communication with each other via a MPLS network,
• the MPLS network comprising, at its boundary, an ingress Label Edge Router and an egress MPLS Label Edge Router (LERs), each comprising a module for managing Ethernet Layer 2 VPN services (L2VPN module),
• the ingress and egress LERs respectively connected to the transmitting and receiving CE devices via a first Ethernet bridge and a second Ethernet bridge,
• the first bridge comprising an internal filtering databases including the association of MAC-address to primary egress internal port and to given VLAN identification,
• the first bridge having Ethernet ports comprising at least one external port and at least two internal ports, the at least one external port connected to the transmitting CE device and the at least two internal ports connected to the ingress LER,
• the ingress LER having at least two MPLS ports, interfacing the MPLS network, respectively directly associated to the at least two internal ports of the first Ethernet bridge, and
• from the at least two MPLS ports, a primary MPLS tunnel and a backup MPLS tunnel are connecting the ingress LER to the egress LER, through a primary and a backup MPLS ports respectively;
• and
• notifying, by the L2VPN module of the ingress LER, the first Ethernet bridge about the primary internal port associated to the receiving MAC-address and to the given VLAN identification;
• notifying, by the L2VPN module of the ingress LER, the first Ethernet bridge about the backup internal port directly associated to the backup MPLS port which is acting as a backup MPLS port in an event of failure of the primary MPLS port;
• adding, by the first Ethernet bridge, to the internal filtering database the backup internal port to be used in the event of failure of the primary MPLS port so as to create a combined filtering database;
• notifying, by the L2VPN module of the ingress LER, the first Ethernet bridge about MPLS ports status;
• transmitting, by the at least one transmitting CE device, transmitting Ethernet packets of a given VLAN identification to the receiving MAC-address of the at least one receiving CE device;
• checking, by the first Ethernet bridge, before forwarding the transmitted Ethernet packets, when, in the combined filtering database, the receiving MAC-address of the given VLAN is associated to a backup ingress internal port, if the corresponding primary MPLS port directly associated to the primary ingress internal port is failed;
• and
• if the corresponding primary MPLS port is failed, forwarding Ethernet packets to the backup egress port of the receiving MAC-address having the VLAN identification.