Abstract: In one embodiment, bridges in a computer network maintain a per-port mapping table for each of its ports, where each mapping table maps, for each virtual connection (of more than 4K) at a respective port, i) frame encapsulation fields that uniquely identify a particular virtual connection at the respective port to ii) a particular multiple spanning tree (MST) instance. The bridges may then compute a checksum of a particular mapping table for a particular port, and share the checksum with a corresponding port interconnected with the particular port (e.g., of another bridge). Upon determining that the mapping tables at the corresponding ports match in response to the checksums matching, frames may then be forwarded between the ports based on the particular mapping table.

Abstract: In one embodiment, a network device in a computer network determines a plurality of attribute events that each represent a virtual local area network (VLAN) registration state of a respective VLAN of a plurality of VLANs in the computer network. The plurality of attribute events are grouped into a plurality of sets of two or more attribute events. For each set of two or more attribute events, an encoded value is computed for the set with an encoding algorithm that encodes the two or more attribute events of the set into a single encoded value. Each of the plurality of encoded values is loaded within an attribute structure of a protocol data unit (PDU) message, such that the plurality of encoded values that encompass the plurality of VLANs are included within the attribute structure of the PDU message. The PDU message is transmitted to one or more other network devices.

Abstract: A system and method for implementing telephony devices in a distributed network environment is disclosed. The present invention provides for checking data packets to ensure that non-voice data packets are properly tagged to be transmitted on a native virtual local area network (“VLAN”). Voice data packets transmitted on a separate VLAN with a higher priority.

Abstract: In one embodiment, a method includes receiving at a first portal of a first node data for communication from a first network to a second network that belong to a particular one of a first set of service classes of the first network; determining at the first portal a particular one of a second set of service classes of the second network for the data; and directing the data from the first portal to a second portal of a second node residing at least in part in the second network.

Abstract: A system and method monitors links in a computer network and rapidly detects failures of such links. Network entities disposed at opposite ends of a link are provided with failure detection engines that signal their presence to each other. Thereafter, each failure detection engine ensures that its entity transmits a continuous stream to the other entity by sending either data frames or newly defined failure detection packets. If an interruption in this continuous stream is detected, then the failure detection engine concludes that the link has failed. In response, the failure detection engine preferably notifies other applications or protocols of the failure, and causes the link to be shut-down.

Abstract: Apparatus and method of detecting a fault in a network service includes an Ethernet access network domain in which a heartbeat message is broadcast at a periodic interval by each of a plurality of edge devices associated with an instance of the network service. Each of the edge devices also receives the heartbeat messages broadcast at the periodic interval from other edge devices. A fault occurrence is identified when the edge device fails to receive an expected heartbeat message at the periodic interval from one of the other edge devices.

Abstract: A system and method efficiently conveys Virtual Local Area Network (VLAN) membership information across a bridged network. In particular, an intermediate network device, such as a bridge, includes a plurality of ports for interconnecting entities of a computer network. For each port, a Generic Attribute Registration Protocol (GARP) participant is established that has a compact GARP VLAN Registration Protocol (GVRP) application component and a GARP Information Declaration (GID) component. The GID component operates a plurality of state machines to maintain registration state for all of the VLANs of which the port has been made aware. The compact-GVRP application component further includes an encoder/decoder unit that collapses VLAN registration information according to an encoding algorithm. The collapsed VLAN registration information is then loaded into a single compact-GVRP PDU message for transmission from the respective port.

Abstract: In one embodiment, each network interface of a network device in a computer network may be classified as either a low-speed interface (e.g., wireless) or a high-speed interface (e.g., wired). Illustratively, then, low-speed interfaces may be configured (identified) as external interfaces to external links and high-speed interfaces may be configured (identified) as internal interfaces to internal links. By executing a multiple spanning tree (MST) protocol at the network device with other network devices in the computer network, network devices interconnected with internal links are in a same MST region and internal links within an MST region are preferred over external links between MST regions.

Abstract: In one embodiment, a bridge in a computer network may execute a spanning tree protocol (STP) for network topology and a registration protocol for traffic control of virtual connections (e.g., EVCs) at the bridge. For any gateway ports of the bridge inter-connected with a provider network, the bridge may generate “fake” received registration protocol join messages for a particular virtual connection at the gateway port. The bridge may then either i) propagate the join messages, in response to the gateway port being in a forwarding state according to the STP, on other forwarding ports of the bridge, or ii) in response to the gateway port not being in a forwarding state, block propagation of the join messages to other ports of the bridge.

Abstract: A method of operation for a node of an Ethernet access network includes issuing a multicast message on the Ethernet access network by a maintenance end point (MEP) of the node. The multicast message contains a name of a target MEP. The node is further operable to receive a unicast reply message from the target MEP, the unicast message reply containing a MEP identifier (MEP-ID) and a MEP Media Access Control (MAC) address of the target MEP.

Abstract: In one embodiment, a new maintenance end-point (MEP) may join a particular network (and initiate its sending of continuity check messages, “CCMs”) by transmitting one or more join announcement messages (JAMs). When the JAMs are received by remote MEPs in the particular network, the new MEP may be added to a configured list of MEPs within the particular network at each remote MEP without an alarm. Also, a current MEP may leave the particular network (and cease its transmission of CCMs) by transmitting one or more leave announcement messages (LAMs), which request removal of the current MEP from the configured list at each of the remote MEPs without alarms. Otherwise, transmission of CCMs (that are not JAMs or LAMs) may result in alarms being generated by the MEPs in the particular network for unexpected MEPs or missing MEPs, accordingly.

Abstract: Various systems and methods that allow multiple aggregation protocol sessions to be established in a daisy chain network are disclosed. One method involves sending a first aggregation protocol packet and a first session identifier associated therewith to a first network device via a first interface and sending a second aggregation protocol packet and a second session identifier associated therewith to a second network device via the first interface.

Abstract: In one embodiment, an intermediate network device has a plurality of ports, and at least some of the ports are associated with Virtual Local Area Network (VLAN) designations. A spanning tree entity executes a spanning tree protocol to transition the ports among a plurality of spanning tree states. A VLAN port logic circuit is disposed at one or more of the ports and processes control packets advertising VLAN memberships. The VLAN port logic circuit, in response to receiving a control packet broadcast by another intermediate network device, asserts bits in a VLAN wanted vector for which the spanning tree state of the selected port is in the forwarding state, signifying that network messages associated with such VLAN designations are to be forwarded from the respective port. The VLAN wanted vectors may later be transmitted in control messages from the intermediate network device.

Abstract: In one embodiment, a method associated with a multiple I-service registration protocol (MIRP) includes receiving into an 802.1ah I-component an MVRP TCN from an 802.1ad component. The TCN may be received, for example, from an 802.1ad bridge. The TCN may identify an affected service using an S-VID. Therefore, the example method may include identifying the S-VID specified by the TCN. The method may also include identifying I-SIDs related to the S-VID. The I-SIDs may be identified by consulting an S-VID to I-SID translation table associated with the 802.1ah I-component. The method may also include providing an 802.1ah MIRP PDU to another 802.1ah component. The MIRP PDU may be based on the MVRP TCN and on the I-SID.

Abstract: A grand computer network is formed from layer 2 (L2) networking technology in which groups of Provider L2 bridges are organized into formations, and different formations are interconnected via network-network interface (NNI) links. Customer sites are coupled to the formations. Customers identify their traffic, e.g., frames, by labeling or tagging it with a Customer Virtual Local Area Network (VLAN) Identifier (C-VLAN ID) or Customer Service Instance (CSI). Within the formations, the C-VLAN ID is mapped to a Service VLAN ID (S-VLAN ID) or Provider Service Instance (PSI), and the S-VLAN ID is appended to the customer traffic. The PSIs are hierarchical, such that each PSI belongs to at most one other “outer” or higher-level PSI, but may itself own any number of “inner” or lower-level PSIs. As a given frame traverses through the different formations of the Grand Network via the NNI links, the frame acquires an encapsulation, sheds an encapsulation or exchanges its current encapsulation for a different one.

Abstract: In one embodiment, a bridge in a computer network may execute a spanning tree protocol (STP) for network topology and a registration protocol for traffic control of virtual connections (e.g., EVCs) at the bridge. For any gateway ports of the bridge inter-connected with a provider network, the bridge may generate “fake” received registration protocol join messages for a particular virtual connection at the gateway port. The bridge may then either i) propagate the join messages, in response to the gateway port being in a forwarding state according to the STP, on other forwarding ports of the bridge, or ii) in response to the gateway port not being in a forwarding state, block propagation of the join messages to other ports of the bridge.

Abstract: A system and method for implementing telephony devices in a distributed network environment is disclosed. The present invention provides for voice transmissions to be given a dedicated virtual local area network (“VLAN”) for packet transmission and reception to prevent poor quality of service. Non-voice data packets are transmitted on a separate VLAN.

Abstract: In one embodiment, bridges in a computer network maintain a per-port mapping table for each of its ports, where each mapping table maps, for each virtual connection (of more than 4K) at a respective port, i) frame encapsulation fields that uniquely identify a particular virtual connection at the respective port to ii) a particular multiple spanning tree (MST) instance. The bridges may then compute a checksum of a particular mapping table for a particular port, and share the checksum with a corresponding port interconnected with the particular port (e.g., of another bridge). Upon determining that the mapping tables at the corresponding ports match in response to the checksums matching, frames may then be forwarded between the ports based on the particular mapping table.

Abstract: A method and apparatus for including network security information in a frame is disclosed. Network security information is included in a secure portion of overhead of a frame. The network security information is configured to facilitate network security. A network device configured to process a frame is also disclosed. The frame includes frame security information and network security information. The frame security information is configured to facilitate securing a portion of overhead of the frame, and the network security information is located in the secure portion of the overhead of the frame and is configured to facilitate network security.

Abstract: A system and method automatically configures the interfaces of an intermediate network device. A discovery process operating at the device detects the identity or type of network entities actually coupled to the device's interfaces. Utilizing the identity or type of detected entities, a look-up is performed to obtain a configuration macro specially defined for each detected network entity. The retrieved configuration macros are executed and applied at the respective interfaces. During operation, the intermediate network device continues to monitor the identity and type of entities actually coupled to its interfaces. If a change is detected, such as an entity moving from a first to a second interface, the specially defined configuration macro for that entity floats from the first to the second interface where it is executed and applied.