Abstract: An apparatus for emulating a layer-2 service over at least one network is disclosed. The apparatus includes a signal transmission path. Two provider edge devices are located at opposite ends of the signal transmission path. A provider device is located along the signal transmission path, and this provider device divides the signal transmission path into segments. One of the provider edge devices includes code for adding a demultiplexing header onto data units prior to the data units being transmitted along the signal transmission path.

Abstract: An apparatus and a method for distributing layer-2 VPN information are disclosed. The apparatus is incorporated in a network, and the network includes a first carrier network. The first carrier network is employed by a layer-1 VPN service provider. Layer-1 VPN information is created within the first carrier network. The network also includes a second carrier network. The second carrier network is employed by a different service provider. Layer-2 VPN information is created within the second carrier network. A BGP session is used in transmitting layer-2 VPN information from the second carrier network to the first carrier network.

Abstract: Refresh and filtering mechanisms for LDP based VPLS and L2VPN solutions are disclosed. A method for improving information communication in a network is achieved by these refresh and filtering mechanisms. The network includes provider edge devices which can communicate with each other. The provider edge devices run a communications protocol. The method includes a step of using the communications protocol in providing a first of the provider edge devices with a list of layer-2 virtual private network instances to which a second of the provider edge devices belongs. Another step in the method is filtering layer-2 virtual private network information to be communicated to the second provider edge device from the first provider edge device by reference to the layer-2 virtual private network instances to which the second provider edge device belongs.

Abstract: A generalized Layer-2 virtual private network arrangement and method is disclosed for layer-2 and/or layer-1 VPNs. The generalized Layer-2 VPN includes mechanisms which provide simplified provisioning and a degree of customer autonomy regarding establishing pseudo-wire connections without the assistance of the service provider across the service provider's network. The generalized Layer-2 VPN is particularly useful for overcoming the need for customers to be restricted to a particular transport or technology used within the provider network.

Abstract: A method of arranging, and a system of hierarchically arranged optical virtual private networks in a carrier's carrier virtual private network (VPN) are disclosed. The system has the hierarchical virtual private networks configured such that each VPN in the hierarchical network is affiliated to another VPN as a father or son VPN. Each son VPN has only one father VPN, and each father VPN is responsible for services and connections to its affiliated son VPNs. The system of hierarchical optical VPNs disclosed is particularly useful for allowing a carrier's carrier to provide the management functions for the clients of the carrier.

Abstract: switched virtual circuits. The switched virtual circuit Layer-2 VPN includes logical ports of two types, customer and provider, and port information tables to relate both types which provides simplified provisioning and a degree of customer autonomy regarding establishing virtual connections without the assistance of the service provider across the service provider's network.

Abstract: A Layer-2.5 virtual private network arrangement and method is disclosed for switched Layer2VPN combined with a subset of Layer-3VPNs. The switched virtual circuit Layer-2 VPN includes logical ports of two types, customer and provider, and port information tables, and uses Layer-3 mechanisms to distribute customer routes. This provides simplified provisioning and a degree of customer autonomy regarding establishing of virtual connections without the assistance of the service provider across the service provider's network while allowing the provider to distribute customer reachability information. The switched virtual circuit Layer-2.5VPN using Layer-3 mechanisms is particularly useful for customers who are not comfortable with a full Layer-3 VPN IP datapath due to special security concerns or a desire for Layer-2 QoS with benefits of an IP-VPN service.

Abstract: A technique for implementing an optical virtual private network is disclosed. In one particular exemplary embodiment, the technique may be realized by a method comprising the steps of managing at least one client edge-virtual private network at a client edge by a service provider; and supporting a set of client edge-users at each client edge-virtual private network at each client edge wherein each client edge provides at least one virtual private network service to each client edge-user; wherein each client edge determines connectivity associated with each client edge-user and the service provider establishes the connectivity determined by each client edge.

Abstract: A technique for implementing a virtual private optical switched transport network using virtual private optical cross-connect technology is disclosed. In one particular exemplary embodiment, the technique may be realized by a method comprising the steps of partitioning a network into a plurality of partitions; assigning each partition to a customer; and exclusively controlling the partition assigned to each customer for establishing a private switched network by allowing each customer to exclusively control each respectively assigned partition, wherein each partition comprises at least one virtual private optical cross connect for virtualizing at least one resource.

Abstract: A technique for resource distribution using an auto-discovery mechanism for Provider-Provisioned Layer-2 and Layer-3 Virtual Private Networks. In one particular exemplary embodiment, the technique may be realized by a method for establishing a Virtual Private Network (VPN) tunnel between a first provider edge (PE) device and a second (PE) device of a provider-provisioned VPN. The method may comprise advertising at least one tunnel-based parameter to one or more PE devices over a network backbone using an auto-discovery mechanism, the one or more PE devices including at least one of the first and second PE devices. The method further may comprise configuring a VPN tunnel between the first and second PE devices based at least in part on the at least one tunnel-based parameter.

Abstract: A technique for implementing an automatic port discovery protocol in a virtual private network cross-connect is disclosed. In one particular exemplary embodiment, the technique may be realized by a method comprising the steps of implementing a virtual private cross-connect for supporting a plurality sites associated with at least one virtual private network; providing at least one connection between the virtual private cross-connect and each site; and supporting a combination of at least two of layer-3, layer-2 and layer-1 services.

Abstract: A network can be organized for providing virtual private network services to customers into two regions. A network core for providing layer 2 transport and an associated number of logical provider edges. Each logical provider edge is partitioned into first and second portions. The first portion provides virtual private network services to customers. The second portion works with the core network to communicate with any other logical provider edge within the network. The first portion designated as the PE-Edge includes a group of functions such as a function for configuring optical Ethernet layer 2 virtual private network service, a function for service labeling, a function for ingress traffic management, and a function for information exchange between local VPN and core VPN.