Abstract: A method and system enables policy-based traffic forwarding in a data network by implementing policy-based control over propagation of LSA messages through the data network. A route tag is asserted in respect of a link state advertisement (LSA) message advertising a network address. Propagation of the LSA through the data network is controlled using the asserted internal route tag. At each hop, a policy decision affecting the forwarding of the LSA is made. Exemplary policy decisions include, Pass and Discard. In addition, the forwarding table may be updated using the route and address information contained in the LSA. In this case, routes entered in the forwarding table may be tagged as an inclusion route or an exclusion route. This may be based on the value of an exclusion route flag, which can, for example, be provided as a binary “0” or “1” inserted into an unused portion of the options field of the LSA.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachability information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachabinty information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachability information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachability information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: A method and apparatus provides protection against resource failures in Open Shortest Path First (OSPF) networks, without increasing the complexity of the network topology and/or management. An internal router (IR) automatically maintains a back-up link in a dormant state until a network failure affecting communications with a primary adjacent area border router (ABR) is detected. Upon detection of the network failure, the IR activates the back-up link in order to enable traffic flow to an alternate adjacent ABR, which by-passes the network failure. Upon recovery of communications with the primary adjacent ABR, the IR automatically deactivates the back-up link and resumes traffic flow through the primary adjacent ABR. As a result, traffic is forwarded into the back-up link only when communications with the primary adjacent ABR has failed, thereby maintaining simplicity in the network topology, and minimizing network management and administration requirements.

Abstract: A virtual private network enables private communications over a shared MPLS network between two or more private networks. The virtual private networks include a first router connected to the shared MPLS network and configured to dynamically distribute first router VPN information across the shared MPLS network. The first router VPN information includes a VPN identifier which is assigned to the first router. The VPN also includes a second router connected to the shared MPLS network and and configured to dynamically distribute second router VPN information across the shared MPLS network. The second router VPN information includes a VPN identifier which is assigned to the second router and which is identical to the VPN identifier assigned to the first router. The first and second routers are also configured to establish label switched paths therebetween.

Abstract: In methods and apparatus for acquiring VPN reachability information at a node of a data network, a VPN reachability information request is transmitted from a requesting node. The VPN reachability information request comprises a VPN identifier. Other nodes of the data network receive the VPN reachability information request and, if they have reachability information relevant to that VPN, they transmit such information to the requesting node where it is received and stored. The invention can be used in MPLS VPN architectures.

Abstract: A method and system enables policy-based traffic forwarding in a data network by implementing policy-based control over propagation of LSA messages through the data network. A route tag is asserted in respect of a link state advertisement (LSA) message advertising a network address. Propagation of the LSA through the data network is controlled using the asserted internal route tag. At each hop, a policy decision affecting the forwarding of the LSA is made. Exemplary policy decisions include, Pass and Discard. In addition, the forwarding table may be updated using the route and address information contained in the LSA. In this case, routes entered in the forwarding table may be tagged as an inclusion route or an exclusion route. This may be based on the value of an exclusion route flag, which can, for example, be provided as a binary “0” or “1” inserted into an unused portion of the options field of the LSA.

Abstract: A method and apparatus provides protection against resource failures in Open Shortest Path First (OSPF) networks, without increasing the complexity of the network topology and/or management. An internal router (IR) automatically maintains a back-up link in a dormant state until a network failure affecting communications with a primary adjacent area border router (ABR) is detected. Upon detection of the network failure, the IR activates the back-up link in order to enable traffic flow to an alternate adjacent ABR, which by-passes the network failure. Upon recovery of communications with the primary adjacent ABR, the IR automatically deactivates the back-up link and resumes traffic flow through the primary adjacent ABR. As a result, traffic is forwarded into the back-up link only when communications with the primary adjacent ABR has failed, thereby maintaining simplicity in the network topology, and minimizing network management and administration requirements.