Granted Patent B2

US 7,747,954 · App. 11/386,809 · Granted Jun 29, 2010

Abstract

Claims (34)

1. A method for testing connectivity of virtual private networks, the virtual private networks including customer edge routers and provider edge routers, the provider edge routers belonging to a network managed by a service provider, the method comprising:

displaying a list of the virtual private networks on a display screen of a network management system for the network;

receiving a signal from a user to select at least one virtual private network from the list of the virtual private networks, the virtual private network having a topology, an import route target, and an export route target associated therewith;

generating a list of operations to test connectivity of the virtual private network from the topology, the import route target, and the export route target;

displaying the list of operations to the user on the display screen;

receiving a signal from the user to select an operation from the list of operations, the operation having a source provider edge router and a destination provider edge router associated therewith;

sending a message from the network management system to the source provider edge router to perform the operation; and

performing the operation, wherein the displayed list of operations is a negative connectivity test menu only when the user selects more than one virtual private network, wherein the operation is a ping VPN Routing and Forwarding (VRF) operation that confirms there is no chance of a traffic leak when all outcomes of the ping VRF operation are failures during a negative connectivity test, but otherwise is a connectivity test menu and operations from said negative connectivity menu confirm whether traffic leaks exist between said virtual private networks, the traffic leaks defined as connections between said virtual private networks that are not authorized to be connected.

2. The method of claim 1 , further comprising:

receiving results of the operation from the source provider edge router and displaying the results on the display screen of the network management system.

3. The method of claim 1 , further comprising:

receiving a signal from the user to initiate the operation.

4. The method of claim 1 , further comprising:

receiving a signal from the user to schedule initiation of the operation.

5. The method of claim 1 , wherein the topology is one of a mesh topology and a hub and spoke topology.

6. The method of claim 1 , wherein the virtual private networks are Internet Protocol based virtual private networks.

7. The method of claim 1 , wherein the network management system is located remotely from the provider edge routers.

8. A system for testing connectivity of virtual private networks, the virtual private networks including customer edge routers and provider edge routers, the provider edge routers belonging to a network managed by a service provider with the system, the system comprising:

a processor coupled to memory, a display screen, and an input device; and, modules within the memory and executed by the processor, the modules including: a module for displaying a list of the virtual private networks on the display screen;

a module for receiving a signal from a user to select at least one virtual private network from the list of the virtual private networks, the virtual private network having a topology, an import route target, and an export route target associated therewith;

a module for generating a list of operations to test connectivity of the virtual private network from the topology, the import route target, and the export route target;

a module for displaying the list of operations to the user on the display screen;

a module for receiving a signal from the user to select an operation from the list of operations, the operation having a source provider edge router and a destination provider edge router associated therewith;

a module for sending a message from the system to the source provider edge router to perform the operation; and

a module for performing the operation, wherein the displayed list of operations is a negative connectivity menu only when the user selects more than one virtual private network, wherein the operation is a ping VPN Routing and Forwarding (VRE) operation that confirms there is no chance of a traffic leak when all outcomes of the ping VRF operation are failures during a negative connectivity test, but otherwise is a connectivity test menu and operations from said negative connectivity test menu confirm whether traffic leaks exist between said virtual private networks, the traffic leaks defined as connections between said virtual so private networks that are not authorized to be connected.

9. The system of claim 8 , further comprising:

a module for receiving results of the operation from the source provider edge router and displaying the results on the display screen.

10. The system of claim 8 , further comprising:

a module for receiving a signal from the user to initiate the operation.

11. The system of claim 8 , further comprising:

a module for receiving a signal from the user to schedule initiation of the operation.

12. The system of claim 8 , wherein the topology is one of a mesh topology and a hub and spoke topology.

13. The system of claim 8 , wherein the virtual private networks Internet Protocol based virtual private networks.

14. The system of claim 8 , wherein the system is located remotely from the provider edge routers.

Assignments (9)