Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes a route server for storing an indication in an entry for a first pair of provider edge routers in a virtual private network (intra-VPN) connectivity database, the intra-VPN connectivity database including entries for a plurality of pairs of provider edge routers. The indication to define an additional connectivity for the first pair of provider edge routers beyond connectivity defined in a virtual private network routing and forwarding table associated with a first provider edge router of the first pair of provider edge routers. The first pair of provider edge routers including a second provider edge router to which the first provider edge router is to be communicatively coupled.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes a route server for storing an indication in an entry for a first pair of provider edge routers in a virtual private network (intra-VPN) connectivity database, the intra-VPN connectivity database including entries for a plurality of pairs of provider edge routers. The indication to define an additional connectivity for the first pair of provider edge routers beyond connectivity defined in a virtual private network routing and forwarding table associated with a first provider edge router of the first pair of provider edge routers. The first pair of provider edge routers including a second provider edge router to which the first provider edge router is to be communicatively coupled.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes broadcasting, by a route server, a border gateway protocol advertisement as received at the route server; determining a first provider edge router is to be configured for additional connectivity beyond a connectivity defined in a table associated with the first provider edge router, the additional connectivity including an identification of a second provider edge router to which the first provider edge router is to be communicatively coupled; generating a copy of the received border gateway protocol advertisement; modifying the copy of the received border gateway protocol advertisement to facilitate the additional connectivity; and broadcasting the modified copy of the received border gateway protocol advertisement.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes broadcasting, by a route server, a border gateway protocol advertisement as received at the route server; determining a first provider edge router is to be configured for additional connectivity beyond a connectivity defined in a table associated with the first provider edge router, the additional connectivity including an identification of a second provider edge router to which the first provider edge router is to be communicatively coupled; generating a copy of the received border gateway protocol advertisement; modifying the copy of the received border gateway protocol advertisement to facilitate the additional connectivity; and broadcasting the modified copy of the received border gateway protocol advertisement.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example route server to control connectivity within a VPN comprises a memory to implement a database, a border gateway protocol (BGP) engine to process BGP advertisements, a network interface to receive a first BGP advertisement, which a first route target (RT) associated with the first PE router, from a first provider edge (PE) router associated with the VPN, and an intra-VPN connectivity controller to, in response to the first BGP advertisement, query the database to determine whether the first PE router is to be communicatively coupled to a second PE router of the VPN and when the first and second PE routers of the VPN are to be communicatively coupled, direct the BGP engine to form a second BGP advertisement that includes a second RT associated with the second PE router based on the first BGP advertisement.

Abstract: Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.

Abstract: Certain exemplary embodiments comprise a method that can comprise, via an Ethernet Channel Service Unit (ECSU), providing a packet conversion between a Serial Wide Area Network (WAN) protocol and an Ethernet network protocol. The ECSU can be adapted to provide access to a network service between a first device adapted to communicate using an Ethernet protocol via the Ethernet network and a second device adapted to communicate using a serial protocol via the Serial WAN.

Abstract: Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.

Abstract: Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example route server to control connectivity within a VPN comprises a memory to implement a database, a border gateway protocol (BGP) engine to process BGP advertisements, a network interface to receive a first BGP advertisement, which a first route target (RT) associated with the first PE router, from a first provider edge (PE) router associated with the VPN, and an intra-VPN connectivity controller to, in response to the first BGP advertisement, query the database to determine whether the first PE router is to be communicatively coupled to a second PE router of the VPN and when the first and second PE routers of the VPN are to be communicatively coupled, direct the BGP engine to form a second BGP advertisement that includes a second RT associated with the second PE router based on the first BGP advertisement.

Abstract: Certain exemplary embodiments comprise a method that can comprise, via an Ethernet Channel Service Unit (ECSU), providing a packet conversion between a Serial Wide Area Network (WAN) protocol and an Ethernet network protocol. The ECSU can be adapted to provide access to a network service between a first device adapted to communicate using an Ethernet protocol via the Ethernet network and a second device adapted to communicate using a serial protocol via the Serial WAN.

Abstract: Certain exemplary embodiments comprise a method that can comprise, via an Ethernet Channel Service Unit (ECSU), providing a packet conversion between a Serial Wide Area Network (WAN) protocol and an Ethernet network protocol. The ECSU can be adapted to provide access to a network service between a first device adapted to communicate using an Ethernet protocol via the Ethernet network and a second device adapted to communicate using a serial protocol via the Serial WAN.

Abstract: A method and apparatus for providing dynamic route advertisement based on IP-Sec security associations are disclosed. The method receives a notification for an establishment, a deletion or a modification of a security association for a sub-network. The method then adds or deletes a route for the sub-network based on the security association and dynamically advertises the added or deleted route to one or more peer devices. In one embodiment, the method also receives an advertisement for an added or deleted route from a peer device, identifies at least one IP-Sec client for receiving the advertisement, and establishes or deletes one or more security associations for the at least one identified IP-Sec client.

Abstract: Certain exemplary embodiments comprise a method that can comprise, via an Ethernet Channel Service Unit (ECSU), providing a packet conversion between a Serial Wide Area Network (WAN) protocol and an Ethernet network protocol. The ECSU can be adapted to provide access to a network service between a first device adapted to communicate using an Ethernet protocol via the Ethernet network and a second device adapted to communicate using a serial protocol via the Serial WAN.