Abstract: A method for providing control plane encryption in layer 3 networks is disclosed. The method for providing control plane encryption in layer 3 networks includes for a network having a subset of network elements forming a secured domain; the steps of at a network element which is in the secured domain, encrypting all unencrypted Layer 3 packets as they egress an encryption enable egress interface; unencrypting all encrypted Layer 3 packets as they egress an egress interface is not enabled for encryption; and leaving encrypted all encrypted Layer 3 packets as they egress an encryption enable egress interface. A system and machine readable storage media are also disclosed.

Abstract: Various embodiments relate to a communications system and related method of advertising available bandwidth capacities of leased links. After leasing a link to an operator device, a provider or operator may monitor the available capacity of the leased link and generate an advertising frame when the actual available capacity is below the defined leased capacity of the link. The advertising frame may be an L2 Ethernet frame in a form similar to the routing protocol used in the communications network to avoid additional strain and complexity in the network due to additional protocols for traffic engineering. After propagating the new information throughout the network using the advertising frame operator devices may redirect or shape their traffic of data in response to the updated available capacity on the leased link.

Abstract: A method for providing control plane encryption in layer 3 networks is disclosed. The method for providing control plane encryption in layer 3 networks includes for a network having a subset of network elements forming a secured domain; the steps of at a network element which is in the secured domain, encrypting all unencrypted Layer 3 packets as they egress an encryption enable egress interface; unencrypting all encrypted Layer 3 packets as they egress an egress interface is not enabled for encryption; and leaving encrypted all encrypted Layer 3 packets as they egress an encryption enable egress interface. A system and machine readable storage media are also disclosed.

Abstract: Various embodiments relate to a communications system and related method of advertising available bandwidth capacities of leased links. After leasing a link to an operator device, a provider or operator may monitor the available capacity of the leased link and generate an advertising frame when the actual available capacity is below the defined leased capacity of the link. The advertising frame may be an L2 Ethernet frame in a form similar to the routing protocol used in the communications network to avoid additional strain and complexity in the network due to additional protocols for traffic engineering. After propagating the new information throughout the network using the advertising frame operator devices may redirect or shape their traffic of data in response to the updated available capacity on the leased link.

Abstract: Communication path redundancy protection systems and methods are disclosed. Multiple communication interfaces having a common address support communications on respective communication paths. One of the interfaces or communication paths is selected as an active interface or path for transferring communication traffic. In the event of a fault associated with the active interface or path, another one of the interfaces or paths is selected to become active. The common address allows redundant interfaces to appear as a single interface to other communication equipment, whereas the multiple interfaces provide redundant path protection using a single piece of communication equipment. When embodiments of the invention are implemented in a gateway router of a core communication network, for example, activity switches between redundant access paths have no effect on routing in the core network.

Abstract: A heterogeneous point-to-point links involves different technologies at it two ends, e.g., Ethernet at one end and ATM or Frame Relay at the other end. If two IP systems are connected via a heterogeneous point-to-point link, each may be using different address learning techniques. It is up to the Provider Edge devices to make these different techniques inter-work. A novel provider edge device and procedures that the edge device it to perform for forwarding packets properly are described. According to the invention, the provider edge device uses a broadcast address to forward the packet in one direction toward a customer edge device. In another direction, the provider edge device responds to an ARP request from the customer edge device with its own MAC address so that it can receive a packet from the customer edge device.