Abstract: In one embodiment, a network device may have its network interfaces identified as either network-to-network interfaces (NNIs) configured to communicate with other network devices in a first computer network, or user-to-network interfaces (UNIs) configured to provide service to the first computer network for user devices. Based on determining at least one NNI for forwarding upstream traffic to an aggregation device of the first network that connects the first network to a second network, any NNI that is not used for forwarding upstream traffic is deemed a novel “NNI alternate” (NNI-ALT). The forwarding of traffic at the network device may be controlled to provide user isolation between network devices by denying traffic forwarding between UNIs and NNI-ALTs as well as between NNI-ALTs and NNI-ALTs, while permitting traffic forwarding between NNIs and NNI-ALTs.

Abstract: A PVLAN having a primary and secondary VLAN's where the primary and secondary VLAN's have ports and the users connected to those ports. The MAC addresses of those users are learned in the primary or the secondary VLAN's and together with the port designation are stored preferably in tables associated with the VLAN's and the associated VLAN's. Processes are provided that replicate the tables in the other VLAN's so that the information necessary to transfer packets between source and destination ports is available to the associated VLAN's.

Abstract: Bridge domain communication methods and devices are presented for efficiently communicating information in a bridge domain based upon group indications and source indications. Packets with a source and destination indication are received. A bridge domain communication process is performed at the bridge level wherein a packet is selected for forwarding based upon a source and group indication. For example, a determination is made if a particular bridge domain corresponds to the group destination indication in the received packet. The source indication in the packet is compared with a tracked source designation indication. Output ports associated with the tracked source designation indication are identified if the tracked source designation indication matches the received source indication. The communication packet is forwarded on identified ports.

Abstract: Bridge domain communication methods and devices are presented for efficiently communicating information in a bridge domain based upon group indications and source indications. Packets with a source and destination indication are received. A bridge domain communication process is performed at the bridge level wherein a packet is selected for forwarding based upon a source and group indication. For example, a determination is made if a particular bridge domain corresponds to the group destination indication in the received packet. The source indication in the packet is compared with a tracked source designation indication. Output ports associated with the tracked source designation indication are identified if the tracked source designation indication matches the received source indication. The communication packet is forwarded on identified ports.

Abstract: A method, system, computer program product and apparatus are presented to enable a L2 network device, such as a bridge or switch, to control the flow of a multicast data stream to a connected router in response to control messages received from the router by the L2 network device. By controlling the flow of multicast data streams in this manner, there will be a corresponding reduction in wasted bandwidth due to unnecessary transmission of these multicast data streams and a reduction in processing overhead by the router due to analysis and dropping of unnecessary multicast frames. In one aspect of the present invention, the router can generate the control messages in response to receiving a data frame in a multicast data stream from the L2 network device.

Abstract: Bridge domain communication methods and devices are presented for efficiently communicating information in a bridge domain based upon group indications and source indications. Packets with a source and destination indication are received. A bridge domain communication process is performed at the bridge level wherein a packet is selected for forwarding based upon a source and group indication. For example, a determination is made if a particular bridge domain corresponds to the group destination indication in the received packet. The source indication in the packet is compared with a tracked source designation indication. Output ports associated with the tracked source designation indication are identified if the tracked source designation indication matches the received source indication. The communication packet is forwarded on identified ports.

Abstract: A PVLAN having a primary and secondary VLAN's where the primary and secondary VLAN's have ports and the users connected to those ports. The MAC addresses of those users are learned in the primary or the secondary VLAN's and together with the port designation are stored preferably in tables associated with the VLAN's and the associated VLAN's. Processes are provided that replicate the tables in the other VLAN's so that the information necessary to transfer packets between source and destination ports is available to the associated VLAN's.