Abstract: In one embodiment, a method includes generating an aggregated pseudowire status message at a first network device in a Multi-Protocol Label Switching (MPLS) network, transmitting the aggregated pseudowire status message to a second network device on a Label Switched Path (LSP) extending between the first and second network devices in the MPLS network, and establishing at the first network device, an aggregated pseudowire status session with the second network device upon receiving a response to the aggregated pseudowire status message on the LSP. The aggregated pseudowire status message configured to verify a current status of pseudowires on the LSP. An apparatus is also disclosed.

Abstract: In one embodiment, label distribution sessions are established between a Modular Cable Modem Termination System (M-CMTS) core and one or more remote PHYs. The label distribution sessions facilitate association of labels with either Radio Frequency (RF) channels or groups of the RF channels that extend from the remote PHYs to one or more cable modems. The labels are then used to facilitate communications between the M-CMTS core and the remote PHYs over a MultiProtocol Label Switching (MPLS) network.

Abstract: In one embodiment, a method includes generating an aggregated pseudowire status message at a first network device in a Multi-Protocol Label Switching (MPLS) network, transmitting the aggregated pseudowire status message to a second network device on a Label Switched Path (LSP) extending between the first and second network devices in the MPLS network, and establishing at the first network device, an aggregated pseudowire status session with the second network device upon receiving a response to the aggregated pseudowire status message on the LSP. The aggregated pseudowire status message configured to verify a current status of pseudowires on the LSP. An apparatus is also disclosed.

Abstract: In one embodiment, an access component of a local network edge device receives traffic, and generates a frame for the traffic that includes a remote context label that identifies an access component of the remote network edge device to which the traffic is to be forwarded upon arrival at the remote network edge device, and a virtual circuit label corresponding to a particular virtual service of the traffic. The local network edge device forwards the frame towards the remote network edge device. In another embodiment, the frame may be received at a core component of the remote network edge device, an in response to the remote context label identifying an access component of the remote network edge device, forwarded to the access component, which determines the particular virtual service, and forwards the traffic from the frame out the access component towards an endpoint for the traffic.

Abstract: The protection of multi-segment pseudowires by utilizing backup paths is disclosed herein. Disclosed embodiments include methods that establish at least one backup path for multi-segment pseudowires, the establishing being performed prior to detection of failure in the primary path. Upon detecting a path failure, the detected failure is signaled to the head-end, a backup path is chosen, and reachability information associated with the chosen backup path is signaled across the backup path before reverse traffic is switched to the backup path. In other disclosed embodiments, apparatus are configured to establish, prior to detection of failure in the primary path, at least one backup path for the multi-segment pseudowire.

Abstract: The protection of multi-segment pseudowires by utilizing pre-computed backup paths is disclosed herein. Disclosed embodiments include methods that establish at least one backup path for multi-segment pseudowires, the establishing being performed prior to detection of failure in the primary path. Upon detecting a path failure, the detected failure is signaled to the head-end, a pre-computed backup path is chosen, and the chosen backup path is signaled to the tail-end. In other disclosed embodiments, apparatus are configured to establish, prior to detection of failure in the primary path, at least one backup path for the multi-segment pseudowire. Networks can be configured to signal a detected failure to the head-end; choose a pre-computed backup path; and signal the backup path to the tail-end.

Abstract: In one embodiment, a communications distribution process maintains at least two pseudowires through a network such that the pseudowires share a burden of delivering data through the network. The communications distribution process receives feedback data concerning operation of each pseudowire. The communications distribution process utilizes the feedback data to distribute communications to the common destination across each of the pseudowires. Additionally, the communications distribution process utilizes the feedback to establish at least one new pseudowire, in addition to the first pseudowire and the second pseudowire, for transmission of data traffic.

Abstract: In one embodiment, a protected switching provider edge (S-PE) and a backup S-PE may be operated, where the protected S-PE has at least one multi-segment pseudowire (MS-PW) and is between a first and second provider edge (PE) on the MS-PW. To protect the protected S-PE, the first and second PE may be informed of the backup S-PE and a backup label to reach the second and first PE, respectively, via the backup S-PE to remain on the MS-PW. Upon detecting loss of connectivity with the protected S-PE, the first and/or second PE may forward packets of the MS-PW to the backup S-PE with the corresponding backup label to reach the second or first PE, respectively, on the MS-PW.

Abstract: In one embodiment, a method includes generating an aggregated pseudowire status message at a first network device in a Multi-Protocol Label Switching (MPLS) network, transmitting the aggregated pseudowire status message to a second network device on a Label Switched Path (LSP) extending between the first and second network devices in the MPLS network, and establishing at the first network device, an aggregated pseudowire status session with the second network device upon receiving a response to the aggregated pseudowire status message on the LSP. The aggregated pseudowire status message configured to verify a current status of pseudowires on the LSP. An apparatus is also disclosed.

Abstract: A method, apparatus and computer program product for building multipoint Pseudo Wires (PWs) using Multicast Label Distribution Protocol (MLDP) is presented. A multipoint PW leaf identifier (mTAI) is configured on one or more Layer 2 (L2) leaf interface(s) of a multipoint PW. A multipoint PW root identifier identifying the root of the multipoint PW is also configured and an opaque value is computed, the opaque value used in MLDP label mapping messages that will flow upstream towards a the root of the multipoint PW. The opaque value is computed from the multipoint leaf identifier and the multipoint root identifier. The PE leaf routers direct MLDP label mapping to the root PE router via a core network.

Abstract: A system allows a device to communicate using a virtual network the method by assigning a network address to the device. The network address is selected from a plurality of network addresses that can be assigned to any of a plurality of virtual networks. The system receives a request to authenticate the device, and then determines a virtual network on which to assign the device. The virtual network is selected from the plurality of virtual networks. The system identifies the device as authenticated based on the assigning of the network address and the virtual network.

Abstract: In an embodiment, a method is provided for regulating network traffic and virtual private networks. In this method, network traffic transmitted along multiple communication paths is received, and these communication paths are associated with forwarding identifiers. A portion of the forwarding identifiers is identified to match a particular forwarding identifier associated with a particular virtual private network. At the same time, the policy associated with the particular virtual private network is identified. A portion of the network traffic that is associated with the portion of the identified forwarding identifiers can then be regulated based on the policy.

Abstract: In one embodiment, a protected switching provider edge (S-PE) and a backup S-PE may be operated, where the protected S-PE has at least one multi-segment pseudowire (MS-PW) and is between a first and second provider edge (PE) on the MS-PW. To protect the protected S-PE, the first and second PE may be informed of the backup S-PE and a backup label to reach the second and first PE, respectively, via the backup S-PE to remain on the MS-PW. Upon detecting loss of connectivity with the protected S-PE, the first and/or second PE may forward packets of the MS-PW to the backup S-PE with the corresponding backup label to reach the second or first PE, respectively, on the MS-PW.

Abstract: A method, apparatus and computer program product for providing Outbound Route Filtering (ORF) is presented. An ORF list is produced and an ORF filter is built from the ORF list. The ORF list is built from received ORF entries. The ORF list is advertised to client and non-client peers. The ORF filter is built from a received ORF list and is directed toward the advertiser of the ORF list.

Abstract: In one embodiment, label distribution sessions are established between a Modular Cable Modem Termination System (M-CMTS) core and one or more remote PHYs. The label distribution sessions facilitate association of labels with either Radio Frequency (RF) channels or groups of the RF channels that extend from the remote PHYs to one or more cable modems. The labels are then used to facilitate communications between the M-CMTS core and the remote PHYs over a MultiProtocol Label Switching (MPLS) network.

Abstract: In one embodiment, a method includes receiving a data link layer packet, such as an Ethernet packet, at a local provider edge node in a provider network from a first customer edge node of multiple customer edge nodes connected directly to the local provider edge node. A tunnel data packet for a particular tunneling protocol is generated. The tunnel data packet includes tunnel data that indicates tunnel termination at a different provider edge in the provider network. The tunnel data packet also includes customer identifier data and the data link layer packet. The customer identifier data uniquely indicates a customer associated with the first customer edge node. The tunnel data packet is sent over the provider network.

Abstract: A layer-2 virtual-private-network (L2-VPN) service with automatic discovery and connection establishment is provided within a wide-area, multiple-autonomous-system (AS) network according to one of two approaches. In the first approach, inter-AS tunnels are used to connect pairs of provider edge (PE) routers of different ASes, and the PE routers then establish signaling connections to each other which are used to create pseudowires that implement the layer-2 connectivity. A second approach utilizes so-called “pseudowire switching” in which separate pseudowires are created within each AS and between ASes, and then the separate pseudowires are stitched together to form end-to-end connections. The first approach has the benefit of transparent operation provided by the tunnel, while the second approach requires fewer inter-AS signaling connections.

Abstract: A method for determining a cumulative network layer reachability cost of traversing one or more autonomous network routing systems comprises receiving first network route information from an originating customer edge router, wherein the first network route information identifies a route in a customer network; determining a transit cost from the provider edge router to an endpoint associated with the originating customer edge router based upon a metric value received in a cost community attribute; repeating the determining step for each of one or more autonomous systems that lie in a path from the originating customer edge router to a destination customer edge router, to result in determining an accumulated transit costs across one or more autonomous systems; and determining, based at least in part upon the accumulated transit cost, a best path from the provider edge router to the endpoint associated with the originating customer edge router.

Abstract: Implementation of a VPN service such as a VPLS (Virtual Private Local area network Service) is performed utilizing a two-stage process. A first stage of the two-stage process involves providing notification of whether a PE (Provider Edge) router in a label-switching network has VPLS capability. Notification can include broadcasting a message from a PE router to remote PE routers in the label-switching network to indicate whether the broadcasting PE router is VPLS enabled. A second stage of the two-stage process involves, based on receiving a notification that a PE router is VPLS enabled, generating a query message to discover a set of VPLS instances to which the broadcasting PE router belongs. In this way, a given PE router generating the query message can identify other PE routers in the label-switching network associated with the same VPLS for purposes of setting up the VPLS in the label-switching network.

Abstract: In one embodiment, label distribution sessions are established between a Modular Cable Modem Termination System (M-CMTS) core and one or more remote PHYs. The label distribution sessions facilitate association of labels with either Radio Frequency (RF) channels or groups of the RF channels that extend from the remote PHYs to one or more cable modems. The labels are then used to facilitate communications between the M-CMTS core and the remote PHYs over a MultiProtocol Label Switching (MPLS) network.