Layer two virtual private network having control plane address learning supporting multi-homed customer networks
AssigneeJuniper Networks, Inc.
InventorsRahul Aggarwal, Ravi Shekhar
Life of this patent
Estimating the term…
Abstract
This disclosure describes techniques for supporting an and Multi-Protocol Label Switching (MPLS)-based Virutal Private Network (VPN) service that provides layer two (L2) connectivity between the customer edge device. In particular, the techniques support a Border Gateway (BGP) MPLS-based MAC VPNs (“MAC-VPN” or “MAC VPN”). The techniques provide a MAC VPN in which L2 MAC address learning occurs in the control plane via inter-device BGP signaling in the control plane rather than the data plane, in response to VPN traffic, as may be typical with other VPN technologies.
Claims24
A method comprising:
- receiving, at a first multi-protocol label switching (MPLS) edge switch, a layer two (L2) communication from a first one of a plurality of customer networks via an attachment circuit coupling the first MPLS edge switch to the first one of the plurality of customer networks, wherein the L2 communication includes a media access control (MAC) address for a customer device within the first customer network, wherein the first MPLS edge switch is one of a plurality of the first MPLS edge switches that provide a layer two (L2) virtual private network (VPN) through a provider network for the plurality of customer networks, and wherein the first one of the customer networks is coupled to a second one of the MPLS edge switches of the VPN by a second attachment circuit that forms a multi-homed, Ethernet segment with the first attachment circuit;
- and
- outputting a control plane routing protocol message from the first MPLS edge switch to at least one other MPLS edge switch within the provider network, wherein the routing protocol message announces the MAC address of the customer device and an identifier for the Ethernet segment on which the L2 communication was received.
A multi-protocol label switching (MPLS) edge switch comprising:
- a first interface that couples the MPLS edge switch to an attachment circuit of a first one of a plurality of customer networks, wherein the attachment circuit carries a layer two (L2) communication that includes a media access control (MAC) address for a customer device within the first customer network, and wherein the attachment circuit is one of a plurality of attachment circuits that forms an active-active, multi-homed Ethernet segment that connects the customer network to a service provider network;
- a second interface that couples the MPLS edge switch to the service provider network having a plurality of remote MPLS edge switches that provide an L2 virtual private network (VPN) for the customer network;
- a control unit having a processor programmed to output a routing protocol message from the MPLS edge switch to the remote MPLS edge switches within the provider network, wherein the routing protocol message announces the MAC address of the customer device and an identifier for the Ethernet segment on which the L2 communication was received;
- and
- a switching element programmed to switch L2 communications between the attachment circuit of the network device and the L2 VPN of the service provider network.
Dependencies are inferred from the claim text.