Virtual private networks
View Patent ↗A network can be organized for providing virtual private network services to customers into two regions. A network core for providing layer 2 transport and an associated number of logical provider edges. Each logical provider edge is partitioned into first and second portions. The first portion provides virtual private network services to customers. The second portion works with the core network to communicate with any other logical provider edge within the network. The first portion designated as the PE-Edge includes a group of functions such as a function for configuring optical Ethernet layer 2 virtual private network service, a function for service labeling, a function for ingress traffic management, and a function for information exchange between local VPN and core VPN. The second portion designated as PE-Core includes a group of functions such as a function for distributing service labels, a function for distributing information on transport tunnels, a function for information exchange between local and core VPN. Within the logical provider edge or Logical PE, the PE-Edge and PE-Core communicate via a layer 2 network.
1. A network organized for providing virtual private network services to customers in first and second local networks, with the network comprising:
a core network for providing layer 2 transport;
a first logical provider edge including first and second physical devices, the first physical device providing virtual private network services access to customers via the first local network, the second physical device working with the core network, wherein the second physical device includes a function for distributing information on transport tunnels; and
a second logical provider edge including third and fourth physical devices, the third physical device providing virtual private network service access to customers via the second local network, the fourth physical device working with the core network and including a function for distributing information on transport tunnels,
wherein the first and second logical provider edges are interconnected via the core network, and wherein at least a portion of Ethernet packet traffic communicated between the first and second logical provider edges is transported via a pair of uni-directional tunnels.
2. A network as claimed in claim 1 wherein the first and third physical devices each include a function for configuring layer 2 virtual private network service.
3. A network as claimed in claim 1 wherein the first and third physical devices each include a function for service labeling.
4. A network as claimed in claim 1 wherein the first and third physical devices each include a function for ingress traffic management.
5. A network as claimed in claim 1 wherein the first and third physical devices each include a function for information exchange between local VPN and core VPN.
6. A network as claimed in claim 1 wherein the second and fourth physical devices each include a function for distributing information on transport tunnels.
7. A network as claimed in claim 1 wherein the second and fourth physical devices each include a function for information exchange between local VPN and core VPN.
8. A network as claimed in claim 1 wherein the first physical device and the second physical device communicate via a layer 2 network.
9. A method of organizing a network for providing virtual private network services to customers, the method comprising:
providing layer 2 transport within a core of the network;
defining a first logical provider edge including a first physical device for providing virtual private network service access to customers in a first local network, and a second physical device for working with the core of the network and distributing information on transport tunnels,
defining a second logical provider edge including a third physical device for providing virtual private network service access to customers in a second local network, and a fourth physical device for working with the core of the network and distributing information on transport tunnels,
wherein the first and second logical provider edges are interconnect via the core network; and
communicating at least some Ethernet packet traffic between the first and second logical provider edges via a pair of uni-directional tunnels.
10. A method of claim 9 including the further steps of configuring layer 2 virtual private network service by the first and third physical devices.
11. A method of claim 9 including the further steps of providing service labeling by the first and third physical devices.
12. A method as claimed in claim 9 including the further steps of managing ingress traffic by the first and third physical devices.
13. A method as claimed in claim 9 including the further steps of exchanging information between local VPN and core VPN by the first and third physical devices.
14. A method as claimed in claim 9 including the further steps of distributing service labels by the second and fourth physical devices.
15. A method as claimed in claim 9 including the further steps of exchanging information between local VPN and core VPN by the second and fourth physical devices.
16. A network organized for providing virtual private network services to customers comprising:
a first logical provider edge including first and second physical provider edge devices, the first physical device operative for providing virtual private network service access to customers of a first local network, the second physical device operative for working with the core network; and
a second logical provider edge including third and fourth physical provider edge devices, the third physical device operative for providing virtual private network service access to customers of a second local network, the fourth physical device operative for working with the core network;
wherein the first and second logical provider edges are interconnect via the core network, and wherein at least some Ethernet packet traffic from the local network communicated between the first and second logical provider edges is transported via a pair of uni-directional tunnels;
wherein the first and third physical devices each include a function for configuring optical Ethernet layer 2 virtual private network service, a function for service labeling, a function for ingress traffic management, and a function for information exchange between local VPN and core VPN; and
wherein the second and fourth devices each include a function for distributing service labels, a function for distributing information on transport tunnels, and a function for information exchange between local VPN and core VPN.
17. A network as claimed in claim 1 wherein the first and second physical devices are capable of connecting through a local virtual private network while said core network supports a core virtual private network.
18. A method as claimed in claim 9 wherein the first and second physical devices can connect through a local virtual private network while said core network supports a core virtual private network.
19. A network as claimed in claim 16 wherein the second physical device includes: a module for configuring layer 2 virtual private network service, a module for distributing service labels, a module for distributing information on transport tunnels, and a module for information exchange between local and core VPN.