Methods, apparatus and data structures for preserving address and service level information in a virtual private network

• US 6,993,026 B1
• Filed: 08/31/2000
• Issued: 01/31/2006
• Est. Priority Date: 08/31/2000
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Communications Inc.
• Inventors: Voit, Eric A., Baum, Robert T.
• Primary Examiner(s): Nguyen, Chau
• Assistant Examiner(s): WAHBA, ANDREW W
• Application Number:
  US09/652,095
• Time in Patent Office: 1,979 Days
• Field of Search: 370/389, 370/392, 370401- 4, 370/469, 370/492, 370/402, 370/403, 370/404
• US Class Current: 370/392
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/245 Link aggregation, e.g. trunking
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/324 in the data link layer [OSI layer 2], e.g. HDLC
• CPC Class Codes: H04L 69/325 in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y02D 30/50 in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

Supporting virtual private networks by using a new layer 3 address to encapsulate a network-bound packet so that its context information, from which a layer 2 (e.g., MAC) address can be derived, is preserved. If this encapsulation was not done, the layer 2 address would change over each segment of the network. Thus, the encapsulation preserves the concept of group identification, using at least a part of the context, over the entire network and not just at the edge of the network. If a packet is received from the network (to be forwarded to a customer), the layer 3 address that was added in the encapsulation is stripped off. The original layer 3 destination address may be used with a client device addressing table to determine a new context information, and a layer 2 (e.g., MAC) address of a destination client device. If the client device addressing table does not include entries corresponding to the layer 3 destination address, an address resolution protocol (or “ARP”) may be broadcast to request such information or contents of inbound packets may be observed (snooping). The packet may then be forwarded to an aggregation device.

Claims

1. A method comprising:

a) receiving a packet having a layer 2 destination address and a first layer 3 destination address at a port;

b) modifying the packet by replacing the layer 2 destination address with context information based on the port;

c) determining a second layer 3 destination address based on at least a portion of the first layer 3 destination address; and

d) encapsulating the modified packet with the second layer 3 destination address.

2. The method of claim 1 further comprising encapsulating the modified packet with a layer 3 source address, wherein the layer 3 source address corresponds to the layer 3 address of an ingress access router.

3. The method of claim 1 wherein the second layer 3 destination address corresponds to a layer 3 address of an egress access router.

4. The method of claim 1, wherein the context information includes at least one of a logical port identifier, customer identifier or a VPN identifier.

5. The method of claim 1, wherein the context information includes at least one of a quality of service identifier or a class of service identifier.

6. A method comprising:

a) receiving an encapsulated packet having context information, a first layer 3 destination address, and a second layer 3 destination address, the context information indicating a first network;

b) creating a de-encapsulated packet by removing the second layer 3 destination address from the encapsulated packet;

c) determining a destination layer 2 address based on (i) at least a portion of the first layer 3 destination address, and (ii) at least a portion of the context information;

d) replacing the context information with the determined destination layer 2 address in the de-encapsulated packet; and

(e) sending the packet to a second network;

wherein the first network and second network share a layer 2 address space containing the determined destination layer 2 address.

7. The method of claim 6, wherein the encapsulated packet further includes a layer 3 source address corresponding to an ingress access router.

8. The method of claim 6, wherein the second layer 3 destination address corresponds to a layer 3 address of an egress access router.

9. The method of claim 6, wherein the context information includes at least one of a logical port identifier, customer identifier or a VPN identifier.

10. The method of claim 6, wherein the context information includes at least one of a quality of service identifier or a class of service identifier.