Abstract: A data plane architecture enables IP applications, hosted on any processor within a network element, to define steering policies that may be implemented in the data plane. The steering policies enable the applications to define steering policies containing both attributes and actions. The attributes are used to identify the packets and the actions are used to define how the data plane of the network element should handle the packets. The steering policies are implemented in the data plane of the network element by a data path policy steering process. The data path policy steering process operates to implement steering policies defined by applications to cause IP termination to occur at any processor on the network element or optionally at a processor off the network element.

Abstract: The present invention advantageously provides a method, system and apparatus for aggregating multiple site-specific routes, by determining a first aggregate-aware route that includes a prefix of a site-specific address and a prefix length of an aggregate route address of a first service provider. The method and system can be implemented as an enhancement to existing IP protocols such as BGP and other inter-domain routing protocols. The method and apparatus may further include applying a routing protocol policy in which an aggregate route may serve as a proxy for an aggregate-aware route when the address of the aggregate route matches the address of the aggregate-aware route. The method and system may yet further include determining a second aggregate-aware route that includes the prefix of the aggregate route address of the first service provider and a prefix length of a second aggregate route address of a second service provider.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachability information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachabinty information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: An emulated multi-QoS link provides an application-level Connection (e.g. a Multi-Protocol Label Switching (MPLS) E-LSP) with the capability of receiving or transmitting messages of various QoS levels over an interconnection employing a connection-oriented protocol (e.g. ATM) at the data link layer. The emulated multi-QoS link may provide the application managing the application-level Connection (e.g. MPLS) with a control plane Application Programming Interface (API) like that of a multi-QoS link which may provide link status based on the status of underlying connections at the data link layer. The connection-oriented or non connection-oriented nature of the data link layer protocol is transparent to an application instance using the emulated multi-QoS link. Advantageously, emulated multi-QoS links may simplify merging in the case where the application is MPLS.

Abstract: A system and method of automatically configuring virtual private networks is provided. The virtual private networks disclosed, include multiple routers selectively connectable to the shared network, such that each of the routers is assigned at least one: shared network address, private network address and virtual private network identifier. Each router includes a controller configured to communicate a router configuration message over the shared network to other members of the same virtual private network. The router configuration message informs the other members of the virtual private network the address of the router and what devices are connected to the router.