Managed IP routing services for L2 overlay IP virtual private network (VPN) services

• US 7,280,534 B2
• Filed: 11/19/2003
• Issued: 10/09/2007
• Est. Priority Date: 11/19/2003
• Status: Active Grant

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Koppol, Pramod V.
• Primary Examiner(s): Nguyen, Chau
• Assistant Examiner(s): SMITH, MARCUS
• Application Number:
  US10/717,151
• Publication Number:
  US 20050105519A1
• Time in Patent Office: 1,420 Days
• Field of Search: 370/352, 370/392
• US Class Current: 370/352
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04Q 2213/13353 Routing table, map memory
• CPC Class Codes: H04Q 2213/13384 Inter-PBX traffic, PBX networks, e.g. corporate networks
• CPC Class Codes: H04Q 2213/13389 LAN, internet
• CPC Class Codes: H04Q 2213/13399 Virtual channel/circuits

Abstract

A method and apparatus for providing IP-VPN services for customers and service providers utilizing layer-2 point-to-point connectivity. The method and apparatus include exchanging unique loop-back addresses of customer edges (CE) between the CEs via a respective data virtual circuit therebetween, and sending IP addresses of customer networks associated with each CE to an associated IP service controller (IPSC). The associated IPSC broadcasts the IP addresses of the associated customer networks to other IPSCs, and each CE sends to an associated IPSC, a list of received loop-back addresses. Each IPSC then sends to an associated CE, customer network addresses received from other IPSCs, and each CE populates a local routing table with information mapping the customer networks with a data virtual circuit.

Claims

1. A method for providing Internet Protocol (IP) Virtual Private Network (VPN) services, comprising:

exchanging unique loop-back addresses of customer edges (CE) between said CEs via a respective data virtual circuit therebetween;

sending IP addresses of customer networks associated with each CE to an associated IP service controller (IPSC);

broadcasting from said associated IPSC, said IP addresses of said associated customer networks to other IPSCs;

sending, from each CE to an associated IPSC, a list of received loop-back addresses;

sending, from each IPSC to an associated CE, customer network addresses received from other IPSCs; and

populating, at each CE, a local routing table with information mapping said customer networks with a data virtual circuit.

2. The method of claim 1, wherein prior to said sending said IP addresses of customer networks, said method further comprises:

assigning a unique loop-back addresses to each CE.

3. The method of claim 2, wherein said loop-back addresses comprise an IP address.

4. The method of claim 1, wherein said sending IP addresses of customer networks associated with each CE to an associated IPSC further comprises excluding a loop-back address of said sending CE.

5. The method of claim 1, wherein said sending IP addresses of customer networks to an IPSC are sent over an out-of-band control virtual circuit.

6. The method of claim 1, wherein said broadcasting said IP addresses to other IPSCs comprises distributing said IP addresses over an Border gateway Protocol with Multi-Protocol extensions (mp-BGP) routing protocol path.

7. The method of claim 1, wherein said broadcasting from said associated IPSC to other IPSCs further comprises broadcasting a VPN specific identifier and a next-hop-attribute set to the loop-back address of said CE associated with said IPSC.

8. The method of claim 1, wherein said sending, from each IPSC to an associated CE, customer network addresses received from other IPSCs comprises sending those customer network addresses that have loop-back addresses in said list provided by the associated CEs.

9. Apparatus for providing Internet Protocol (IP) Virtual Private Network (VPN) services, comprising:

means for exchanging unique loop-back addresses of customer edges (CE) between said CEs via a respective data virtual circuit therebetween;

means for sending IP addresses of customer networks associated with each CE to an associated IP service controller (IPSC);

means for broadcasting from said associated IPSC, said IP addresses of said associated customer networks to other IPSCs;

means for sending, from each CE to an associated IPSC, a list of received loop-back addresses;

means for sending, from each IPSC to an associated CE, customer network addresses received from other IPSCs; and

means for populating, at each CE, a local routing table with information mapping said customer networks with a data virtual circuit.

10. The apparatus of claim 9, wherein said means for sending said IP addresses of customer networks, said apparatus further comprises:

means for assigning a unique loop-back addresses to each CE prior to said sending said IP addresses.

11. The apparatus of claim 10, wherein said loop-back addresses comprise an IP address.

12. The apparatus of claim 9, means for sending IP addresses of customer networks associated with each CE to an associated IPSC further comprises means for excluding a loop-back address of said sending CE.

13. The apparatus of claim 9, wherein said means for sending IP addresses of customer networks to an IPSC are sent over an out-of-band control virtual circuit.

14. The apparatus of claim 9, wherein said means for broadcasting said IP addresses to other IPSCs comprises distributing said IP addresses over an Border gateway Protocol with Multi-Protocol extensions (mp-BGP) routing protocol path.

15. The apparatus of claim 9, wherein said means for broadcasting from said associated IPSC to other IPSCs further comprises means for broadcasting a VPN specific identifier and a next-hop-attribute set to the loop-back address of said CE associated with said IPSC.

16. The apparatus of claim 9, wherein said means for sending, from each IPSC to an associated CE, customer network addresses received from other IPSCs comprises means for sending those customer network addresses that have loop-back addresses in said list provided by the associated CEs.

17. The apparatus of claim 9, wherein said IPSCs are facilitated in one of a switch and a server.

18. The apparatus of claim 17, wherein each said IPSC comprises:

I/O interface means for providing physical connectivity to establish control virtual circuits between the CEs and associated IPSCs, and a routing control mp-iBGP path between said IPSCs;

a CE-IPSC communication protocol for provides BGP routing procedures for the control virtual circuits between said CEs and associated IPSCs;

a IPSC-IPSC communication protocol for providing mp-iBGP routing procedures for the routing protocol path between said IPSCs;

a CE-IPSC routing database for storing routing information for the control virtual circuits;

an IPSC-IPSC routing database for storing mp-iBGP routing protocol paths; and

means for providing interaction procedures between said I/O interface means, CE-IPSC communication protocol, IPSC-IPSC communication protocol, CE-IPSC routing database, and IPSC-IPSC routing database.

19. The apparatus of claim 18, wherein said means for providing interaction procedures utilize information in the IPSC-IPSC routing database, in conjunction with the CE-IPSC protocol information and I/O interfaces, to determine routing information to be sent to the CEs and the associated IPSCs.

20. A method for providing Internet Protocol (IP) Virtual Private Network (VPN) services, comprising:

receiving, at a customer edge (CE), unique loop-back addresses of other customer edges (CEs) via a respective data virtual circuit therebetween;

sending IP addresses of customer networks associated with said CE to an associated IP service controller (IPSC);

broadcasting from said associated IPSC, said IP addresses of said associated customer networks to other IPSCs;

sending, from said CE to said associated IPSC, a list of received loop-back addresses;

sending, from said associated IPSC to said CE, customer network addresses received from other IPSCs; and

populating a local routing table of said CE with information mapping said customer networks with a data virtual circuit.

21. The method of claim 20, wherein said sending IP addresses of customer networks associated with said CE to an IPSC further comprises excluding a loop-back address of said CE.

22. The method of claim 20, wherein said broadcasting said IP addresses to other IPSCs comprises distributing said IP addresses over an Border gateway Protocol with Multi-Protocol extensions (mp-BGP) routing protocol path.

23. The method of claim 20, wherein said broadcasting from said associated IPSC to other IPSCs further comprises broadcasting a VPN specific identifier and a next-hop-attribute set to the loop-back address of said CE associated with said IPSC.

24. A method for providing Internet Protocol (IP) Virtual Private Network (VPN) services, comprising:

exchanging unique loop-back addresses of customer edges (CE) between said CEs via a respective data virtual circuit therebetween;

receiving, at an IP service controller (IPSC) associated with a CE, IP addresses of customer networks associated with said CE;

broadcasting from said IPSC, said IP addresses of said associated customer networks to other IPSCs;

sending, from said associated CE to said IPSC, a list of received loop-back addresses;

sending, from said IPSC to an associated CE, customer network addresses received from other IPSCs; and

populating a local routing table of said associated CE with information mapping said customer networks with a data virtual circuit.

25. The method of claim 24, wherein said sending IP addresses of customer networks associated with each CE to an associated IPSC further comprises excluding a loop-back address of said sending CE.

26. The method of claim 24, wherein said IPSC receives said IP addresses of customer networks associated with said CE from an out-of-band control virtual circuit.

27. The method of claim 24, wherein said broadcasting said IP addresses to other IPSCs comprises distributing said IP addresses over an Border gateway Protocol with Multi-Protocol extensions (mp-BGP) routing protocol path.

28. The method of claim 24, wherein said broadcasting from said IPSC to other IPSCs further comprises broadcasting a VPN specific identifier and a next-hop-attribute set to the loop-back address of said CE associated with said IPSC.