Virtual private network (VPN) with channelized ethernet over sonet (EoS) interface and method

• US 7,366,181 B2
• Filed: 09/06/2003
• Issued: 04/29/2008
• Est. Priority Date: 09/06/2003
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Havala, Paul F.
• Primary Examiner(s): HSU, ALPUS
• Application Number:
  US10/656,702
• Publication Number:
  US 20050053079A1
• Time in Patent Office: 1,697 Days
• Field of Search: 370/392, 370/395.53, 370/409
• US Class Current: 370/395.53
• CPC Class Codes: H04J 2203/0085 Support of Ethernet
• CPC Class Codes: H04J 2203/0096 Serial Concatenation
• CPC Class Codes: H04J 3/1611 Synchronous digital hierarchy [SDH] or SONET H04J3/1664 takes precedence for interactions with OTN
• CPC Class Codes: H04J 3/1617 carrying packets or ATM cells
• CPC Class Codes: H04L 12/4604 LAN interconnection over a backbone network, e.g. Internet, Frame Relay
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/4666 Operational details on the addition or the stripping of a tag in a frame, e.g. at a provider edge node
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]

Abstract

A VPN includes a shared label switching network, a plurality of VLANs and edge routers interfacing the VLANs with the shared label switching network. The VLANs are each coupled to an edge router and communicate traffic using channelized EoS.

Claims

1. A Virtual Private Network (VPN), comprising:

a Multi Protocol Label Switching (MPLS) network;

a plurality of Virtual Local Access Networks (VLANs) each coupled to an edge router of the shared label switching network, the VLANs each communicating traffic with a corresponding edge router utilizing channelized Ethernet over SONET (EoS); and

the edge routers interfacing the VLANs with the MPLS network, the edge routers comprising;

a transmit-side edge router operable to convert an ingress VLAN packet received from a VLAN and associated with a VPN to an MPLS packet and to send the MPLS packet to the MPLS network, wherein converting an ingress VLAN packet to an MPLS packet comprises identifying a VPN label that corresponds to a VLAN identifier (VIP) of the ingress VLAN packet and generating an MPLS packet having the VPN label; and

a receive-side edge router operable to convert an MPLS packet received from the MPLS network to an egress VLAN packet and sending the egress VLAN packet to a VLAN associated with the VPN, wherein converting the received MPLS packet to an egress VLAN packet comprises identifying a VID that corresponds to a VPN label contained in the received MPLS packet and generating a VLAN packet having the VID.

2. The VPN of claim 1, the edge routers each comprising a first table storing correspondence between VLAN identifiers (VIPs) contained in VLAN packets and VPN labels contained in MPLS packets.

3. The VPN network of claim 1, wherein each edge routers comprises:

a route decision unit for determining a route which directs an MPLS packet to a receive-side edge router;

a second table for storing forwarding labels, which specify routes decided by the route decision unit, mapped to addresses of receive-side edge routers; and

the transmit-side edge router finds a receive-side edge router corresponding to a destination of a packet, finds a forwarding label, which corresponds to the receive-side edge router, from the second table, generates an MPLS packet that contains the VPN label and the forwarding label and sends the MPLS packet to the MPLS network.

4. The VPN of claim 1, wherein a first edge router which constructs the VPN and is connected to a VLAN sends a second edge router an address set including an address of a VLAN-compatible device connected to the first edge router and the address of the first edge router, and each edge router creates a routing table based upon the received information.

5. The VPN of claim 4, wherein the transmit-side edge router finds a receive-side edge router, which corresponds to the destination of the packet, from said routing table.

6. The VPN of claim 1, wherein the transmit-side edge router discards a VLAN packet having a VID value that is greater than a set value.

7. The VPN of claim 1, wherein the transmit-side edge router inserts user priority information, which is contained in a tag of a VLAN packet, into a label of an MPLS packet as IP precedence information of the MPLS network, and the receive-side edge router inserts IP precedence information, which is contained in the label of an MPLS packet, into the tag of a VLAN packet as user priority information of the VLAN.

8. An edge router of a shared label switching network, comprising:

an Ethernet over SONIET (EoS) line card including a SONET channelization element operable to receive from a Virtual Local Access Network (VLAN) a channelized EoS signal including a plurality of Ethernet channels and to send VLAN packets received in each of the Ethernet channels to a corresponding Ethernet interface;

one or more Virtual Private Network (VPN) units coupled to the Ethernet interfaces and operable to identify a VPN for the VLAN packets and to send the VLAN packets to a corresponding VPN subrouter based on the VPN; and

each VPN subrouter operable to convert the VLAN packets to a label switching packet for transmission over the shared label switching network in the VPN, wherein converting a VLAN packet to a label switching packet comprises identifying a VPN label that corresponds to a VLAN identifier (VIP) of the VLAN packet and generating a label switching packet having the VPN label and a forwarding label.

9. The edge router of claim 8, wherein the label switching network comprises a Multi Protocol Label Switching (MPLS) network.

10. The edge router of claim 8, wherein each VPN subrouter is further operable to convert the VLAN packet to the label switching packet for transmission over the shared label switching network by inserting user priority information from the VLAN packet into a label of the label switching packet.

11. A method, comprising:

receiving a SONET frame including a plurality of Ethernet channels, each Ethernet channel including ingress Virtual Local Access Network (VLAN) packets associated with one or more Virtual Private Networks (VPNs);

determining a VPN associated with each ingress VLAN packet; and

converting each ingress VLAN packet to an egress label switching packet based on the associated VPN for transmission over a shared network, wherein converting a VLAN packet to an egress label switching packet comprises identifying a VPN label that corresponds to a VLAN identifier (VID) of the VLAN packet and generating an egress label switching packet having the VPN label and a forwarding label.

12. The method of claim 11, wherein the egress label switching packet comprises a Multi Protocol Label Switching (MPLS) packet.

13. A method, comprising:

receiving a channelized Ethernet over SONET (EoS) signal comprising a plurality of Ethernet channels, each Ethernet channel including a plurality of Virtual Local Access Network (VLAN) packets;

demultiplexing the Ethernet channels;

determining a Virtual Private Network (VPN) associated with each VLAN packet of each Ethernet channel; and

converting the VLAN packets for each Ethernet channel to label switching packets based on the associated VPN for transmission through a shared label switching network, wherein converting a VLAN packet to a label switching packet comprises identifying a VPN label that corresponds to a VLAN identifier (VID) of the VLAN packet and generating a label switching packet having the VPN label and a forwarding label.

14. The method of claim 13, wherein the label switching network comprises a Multi Protocol Label Switching (MPLS) network and the label switching packets comprise MPLS packets.