Method for operating multi-domain provider ethernet networks

• US 9,112,869 B2
• Filed: 10/22/2014
• Issued: 08/18/2015
• Est. Priority Date: 12/22/2008
• Status: Expired due to Fees

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Inventors: Casey, Liam
• Primary Examiner(s): Zhu, Alvin
• Application Number:
  US14/520,724
• Publication Number:
  US 20150040208A1
• Time in Patent Office: 300 Days
• Field of Search: 370/327, 370/329, 370/338, 370/340, 370/409, 370/411, 370/474, 370/475
• US Class Current: 1/1
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4658 wherein a VLAN tag represents a service provider backbone VLAN, e.g. B-Tag, S-Tag
• CPC Class Codes: H04L 12/4662 wherein a VLAN tag represents a service instance, e.g. I-SID in PBB
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method of enabling extension of a network service of a first domain to a remote customer site hosted by an Access Gateway (AG) in a Provider Ethernet domain. In the first domain, the remote customer site is represented as being hosted by a border gateway (BG) connected to the Provider Ethernet domain, such that subscriber packets associated with the network service are forwarded to or from the remote customer site via the BG. In the Provider Ethernet domain, a trunk connection is instantiated through the Provider Ethernet domain between the host AG and the BG. A trunk cross-connection function is installed in the host AG, for transferring subscriber packets associated with the network service between a respective attachment virtual circuit (AVC) through which the remote customer site is connected to the host AG and an extended AVC tunnelled through the trunk connection. A common service instance identifier (I-SID) is used to identify both the AVC between the host AG and the remote customer site and the extended AVC between the host AG and the BG.

Claims

1. A non-transitory processor-readable medium carrying instructions for execution by at least one processor of an access network element to provide access to a network service instance hosted in a home network domain to a customer site in a foreign network domain, the access network element being configured for connection to the customer site in the foreign domain, the instructions comprising instructions executable by the at least one processor:

to receive from the customer site in the foreign network domain a request to access the network service instance;

to request authentication of the customer site from the home network domain;

in response to receiving authentication of the customer site from the home network domain, to initiate establishment of an attachment virtual circuit between the customer site in the foreign network domain and an access gateway of the foreign network domain, the attachment virtual circuit being associated with a service instance identifier and extending over a trunk from the access gateway of the foreign network domain through a border gateway of the foreign network domain to a boundary of the foreign network domain for connection to a border gateway of the home network domain at the boundary of the foreign network domain, the extended attachment virtual circuit being identified within the trunk by the service instance identifier;

to receive foreign-domain-bound traffic tagged with the service instance identifier on the extended attachment virtual circuit;

to forward the received foreign-domain-bound traffic on the extended attachment virtual circuit through the foreign network domain to the customer site based, at least in part, on the service instance identifier;

to receive traffic from the customer site;

to tag the traffic received from the customer site with the service instance identifier; and

to forward the tagged traffic on the extended attachment virtual circuit through the foreign network domain toward the border gateway of the home network domain.

2. The non-transitory processor-readable medium of claim 1, wherein the instructions comprise instructions executable by the at least one processor to assign the service instance identifier associated with the attachment virtual circuit.

3. The non-transitory processor-readable medium of claim 2, configured for use by an access network element in the form of an access multiplexer connected between the customer site and the access gateway of the foreign network domain.

4. The non-transitory processor-readable medium of claim 3, wherein the instructions comprise instructions executable by the at least one processor to configure the access multiplexer to serve as an attachment point of the customer site in the foreign network.

5. The non-transitory processor-readable medium of claim 2, configured for use by an access network element in the form of the access gateway of the foreign network domain.

6. The non-transitory processor-readable medium of claim 3, wherein the instructions comprise instructions executable by the at least one processor to configure the access gateway to serve as an attachment point of the customer site in the foreign network.

7. The non-transitory processor-readable medium of claim 1, wherein the instructions comprise instructions executable by the at least one processor:

to receive the service instance identifier from an authentication server of home network domain; and

to associate the received service instance identifier with the attachment virtual circuit.

8. The non-transitory processor-readable medium of claim 1, wherein the instructions executable to initiate establishment of the attachment virtual circuit between the customer site in the foreign network domain and an access gateway of the foreign network domain, the attachment virtual circuit being associated with a service instance identifier and extending over a trunk from the access gateway of the foreign network domain through a border gateway of the foreign network domain to a boundary of the foreign network domain for connection to a border gateway of the home network domain at the boundary of the foreign network domain comprise instructions executable to establish an attachment virtual circuit extending over a trunk in the form of a Provider Ethernet trunk.

9. The non-transitory processor-readable medium of claim 1, wherein the instructions executable to tag the traffic received from the customer site with the service instance identifier comprise instructions executable to tag the traffic for the extended attachment virtual circuit with the service instance identifier in a Provider Ethernet I-SID packet header field.

10. A non-transitory processor-readable medium carrying instructions for execution by at least one processor of a border gateway to provide access to a network service instance hosted in a home network domain to customer site in a foreign network domain, the border gateway being configured for use in the home domain to connect to a border gateway of the foreign domain, the instructions comprising instructions executable by the at least one processor:

to associate a first service instance identifier with a second service instance identifier and with an extended attachment virtual circuit coupled to the customer site in the foreign network domain;

to receive foreign-domain-bound traffic tagged with the first service instance identifier from the home domain;

to forward the received foreign-domain-bound traffic on the extended attachment virtual circuit through the foreign network domain to the customer site based, at least in part, on the first service instance identifier;

to receive home-domain-bound traffic tagged with the second service instance identifier on the extended attachment virtual circuit from the customer site; and

to forward the home-domain-bound traffic on the home network domain.

11. The non-transitory processor-readable medium of claim 10, wherein the instructions executable to forward the home-domain-bound traffic on the home network domain comprise instructions executable to perform header translation for the home-domain-bound traffic.

12. The non-transitory processor-readable medium of claim 10, wherein the instructions executable to forward the home-domain-bound traffic on the home network domain comprise instructions executable to tag the home-domain-bound traffic with the first service instance identifier before forwarding the tagged home-domain-bound traffic on the home network domain.

13. The non-transitory processor-readable medium of claim 11, wherein, when the extended virtual attachment circuit is extended over a Provider Ethernet trunk, the instructions executable to perform header translation comprise instructions executable to translate Provider VLAN identifier (B-VID), Provider source address (B-SA) and Provider destination address (B-DA) of the home-domain-bound traffic.

14. The non-transitory processor-readable medium of claim 10, wherein the instructions executable to forward the foreign-domain-bound traffic on the extended virtual circuit through the foreign network domain comprise instructions executable to perform header translation for the foreign-domain-bound traffic.

15. The non-transitory processor-readable medium of claim 10, wherein the instructions executable to forward the foreign-domain-bound traffic comprise instructions executable to tag the foreign-domain-bound traffic with the second service instance identifier before forwarding the tagged foreign-domain-bound traffic on the extended attachment virtual circuit.

16. The non-transitory processor-readable medium of claim 14, wherein, when the extended virtual attachment circuit is extended over a Provider Ethernet trunk, the instructions executable to perform header translation comprise instructions executable to translate Provider VLAN identifier (B-VID), Provider source address (B-SA) and Provider destination address (B-DA) of the foreign-domain-bound traffic.

17. The non-transitory processor-readable medium of claim 10, wherein the instructions comprise instructions executable by the at least one processor:

to receive from the customer site via the foreign network domain a request to access the network service instance;

to request authentication of the customer site from the home network domain; and

in response to receiving authentication of the customer site from the home network domain, to initiate establishment of the attachment virtual circuit between the customer site in the foreign network domain and an access gateway of the foreign network domain, the attachment virtual circuit being associated with a service instance identifier and extending over a trunk from the access gateway of the foreign network domain through a border gateway of the foreign network domain to the border gateway of the home network domain at the boundary of the foreign network domain, the extended attachment virtual circuit being identified within the trunk by the service instance identifier.

18. The non-transitory processor-readable medium of claim 10, wherein:

the instructions comprise instructions executable by the at least one processor to receive a service instance identifier from a server in the home network domain; and

the instructions executable to associate a first service instance identifier with the extended attachment virtual circuit comprise instructions executable by the at least one processor to associate the received service instance identifier with the extended attachment virtual circuit.

19. The non-transitory processor-readable medium of claim 17, wherein the instructions executable to initiate establishment of the attachment virtual circuit between the customer site in the foreign network domain and an access gateway of the foreign network domain comprise instructions executable to establish an attachment virtual circuit extending over a trunk in the form of a Provider Ethernet trunk.

20. The non-transitory processor-readable medium of claim 17, wherein the instructions executable to initiate establishment of the attachment virtual circuit between the customer site in the foreign network domain and an access gateway of the foreign network domain and extending over the trunk from the access gateway of the foreign network domain through the border gateway of the foreign network domain to the border gateway of the home network domain comprise instructions executable by the at least one processor to tunnel the attachment virtual circuit through a trunk connection set up between the access gateway of the foreign network domain and the border gateway of the home domain.

21. The non-transitory processor-readable medium of claim 20, wherein the instructions executable to tunnel the attachment virtual circuit through a trunk connection set up between the access gateway of the foreign network domain and the border gateway of the home domain comprise instructions executable to set up the trunk connection to a cross-connection function of the access gateway, the cross-connection function being configured to transfer packets received from a trunk coupled to the customer site to the trunk connection.

22. The non-transitory processor-readable medium of claim 10, wherein the instructions comprise instructions executable by the at least one processor to represent the customer site in the foreign network domain at the border gateway of the home network domain as a virtual user network interface (UNI) port of a link extending between the border gateway of the home network domain and the border gateway of the foreign network domain.

23. The non-transitory processor-readable medium of claim 10, wherein the first service instance identifier is administered in the foreign network domain and the second service instance identifier is administered in the home network domain.

24. The non-transitory processor-readable medium of claim 10, wherein the first service instance identifier and the second service instance identifier are the same.

25. The non-transitory processor-readable medium of claim 10, wherein the first service instance identifier is an I-SID.

26. The non-transitory processor-readable medium of claim 10, wherein the second service instance identifier is an I-SID.

27. The non-transitory processor-readable medium of claim 10, wherein when the extended virtual circuit is extended over a Provider Ethernet trunk, the instructions comprise:

instructions executable by the at least one processor to receive information comprising a Provider VLAN identifier (B-VID) and a Provider destination address (B-DA) associated with the extended attachment virtual circuit; and

instructions executable by the at least one processor to encapsulate the foreign-domain-bound traffic with the B-VID and the B-DA before forwarding the encapsulated foreign-domain-bound traffic on the extended attachment virtual circuit through the foreign network domain to the customer site.