Abstract: A technique for managing traffic in a multiport network node involves establishing customer-specific VLANs within the multiport network node that are identified by a combination of a VLAN ID and a customer ID. Traffic received at the multiport network node is mapped to a customer-specific VLAN and then broadcast to ports that are included in the customer-specific VLAN. Because customer-specific VLANs are identified by a combination of a VLAN ID and customer ID, a service provider can establish and maintain private broadcast domains on a per-customer ID basis. This enables the service provider to expand the number of unique VLAN IDs within the Service Provider Edge Device beyond the 4,096 limitation set by the IEEE 802.1Q standard while maintaining interoperability with the IEEE 802.1Q standard for incoming and outgoing traffic.

Abstract: A technique for implementing VLANs across a service provider network involves establishing logical ports that have bindings to transport tunnels. The logical ports are then treated the same as physical ports in defining broadcast domains at particular service provider edge devices. Logical ports can be established for Layer 2 transport tunnels that use stacked VLAN tunneling and MPLS tunneling. Establishing a logical port that uses stacked VLAN tunneling involves binding a physical port and a stacked VLAN tunnel to the logical port. Establishing a logical port that uses MPLS tunneling involves binding an MPLS tunnel to a logical port. In one embodiment, the logical port is bound to a static MPLS tunnel and in another embodiment, the logical port is bound to a dynamic MPLS tunnel and the destination IP address of the destination service provider edge device.

Abstract: Rate-limiting a traffic stream using a rate-limit hierarchy involves subjecting a packet to a first rate-limit check, the first rate-limit check corresponding to a first-level traffic classification, subjecting the packet to a second rate-limit check and an infinity rate-limit cheek, the second rate-limit check and the infinity rate-limit check corresponding to a second-level traffic classification, granting an automatic pass to the packet from the infinity rate-limit check regardless of whether or not the packet passes the second rate-limit check, and granting an overall pass of the rate-limit hierarchy if the packet passes the first rate-limit check. In an embodiment, the first-level traffic classification is a parent classification of the second-level traffic classification and the second-level traffic classification is a child classification of the first-level traffic classification.

Abstract: Multiple techniques for providing failure protection in a network node that includes primary and secondary control modules (CMs) are disclosed. One technique involves synchronizing configuration state information between the CMs by executing a configuration command within the primary CM and then executing the same configuration command within the secondary CM only if executing the configuration command within the primary CM does not cause the primary CM to fail. Another technique involves gleaning table entries from hardware-based forwarding tables and using the gleaned table entries to generate a software-based forwarding table in the secondary CM.

Abstract: A technique for managing traffic in a multiport network node involves establishing customer-specific VLANs within the multiport network node that are identified by a combination of a VLAN ID and a customer ID. Traffic received at the multiport network node is mapped to a customer-specific VLAN and then broadcast to ports that are included in the customer-specific VLAN. Because customer-specific VLANs are identified by a combination of a VLAN ID and customer ID, a service provider can establish and maintain private broadcast domains on a per-customer ID basis. This enables the service provider to expand the number of unique VLAN IDs within the Service Provider Edge Device beyond the 4,096 limitation set by the IEEE 802.1Q standard while maintaining interoperability with the IEEE 802.1Q standard for incoming and outgoing traffic.

Abstract: A technique for implementing VLANs across a service provider network involves establishing logical ports that have bindings to transport tunnels. The logical ports are then treated the same as physical ports in defining broadcast domains at particular service provider edge devices. Logical ports can be established for Layer 2 transport tunnels that use stacked VLAN tunneling and MPLS tunneling. Establishing a logical port that uses stacked VLAN tunneling involves binding a physical port and a stacked VLAN tunnel to the logical port. Establishing a logical port that uses MPLS tunneling involves binding an MPLS tunnel to a logical port. In one embodiment, the logical port is bound to a static MPLS tunnel and in another embodiment, the logical port is bound to a dynamic MPLS tunnel and the destination IP address of the destination service provider edge device.

Abstract: Rate-limiting a traffic stream using a rate-limit hierarchy involves subjecting a packet to a first rate-limit check, said first rate-limit check corresponding to a first-level traffic classification, subjecting said packet to a second rate-limit check and an infinity rate-limit check, said second rate-limit check and said infinity rate-limit check corresponding to a second-level traffic classification, granting an automatic pass to said packet from said infinity rate-limit check regardless of whether or not said packet passes said second rate-limit check, and granting an overall pass of said rate-limit hierarchy if said packet passes said first rate-limit check. In an embodiment, the first-level traffic classification is a parent classification of said second-level traffic classification and said second-level traffic classification is a child classification of said first-level traffic classification.