Ethernet loopback detection and service traffic blocking
A method and system for Ethernet loopback detection snoops an egress frame at a UNI-N edge device and records at least one source field of the egress frame, such as a MAC address or a VLAN tag. Ingress frames at the UNI-N edge device are monitored for having the same value in the source field as the egress frame. When an ingress frame has the same source field value as the egress frame, the ingress frame is identified as a loopback frame and is dropped at the UNI-N edge device.
1. A method for Ethernet loopback detection, the method comprising:
snooping an egress frame at a network element, wherein the network element is an edge device of a user network interface in a service provider network, the network element coupled to a customer network at the user network interface;
storing a first media access controller (MAC) address from a first source field of the egress frame;
monitoring an ingress frame received from the customer network, wherein a second MAC address in the first source field of the ingress frame is compared with the first MAC address in the first source field of the egress frame; and
when the second MAC address matches the first MAC address, dropping the ingress frame.
2. The method of claim 1 , further comprising:
counting down a first aging time after snooping the egress frame; and
after the first aging time has elapsed, deleting the first MAC address.
3. The method of claim 1 , wherein the first egress frame is chosen at random.
4. The method of claim 1 , wherein the monitoring the ingress frame is performed for each ingress frame received from the customer network.
5. The method of claim 1 , wherein the service provider network implements a connection oriented Ethernet serving the customer network.
6. The method of claim 5 , further comprising:
storing a first virtual local area network (VLAN) tag from a second source field of the egress frame;
wherein monitoring the ingress frame received from the customer network includes comparing a second VLAN tag in the second source field of the ingress frame with the first VLAN tag; and
when the second VLAN tag matches the first VLAN tag, dropping the ingress frame.
7. The method of claim 6 , further comprising:
counting down a second first aging time after snooping the egress frame; and
after the second aging time has elapsed, deleting the first VLAN tag.
8. A network element for Ethernet loopback detection, the network element comprising:
a processor;
non-transitory computer readable memory media accessible to the processor, wherein the network element is an edge device of a user network interface in a service provider network, the network element coupled to a customer network at the user network interface, and
wherein the memory media store processor-executable instructions, the instructions, when executed by the processor, cause the processor to:
snoop an egress frame intended for the customer network;
store a first media access controller (MAC) address from a first source field of the egress frame;
monitor an ingress frame received from the customer network, wherein a second MAC address in the first source field of the ingress frame is compared with the first MAC address in the first source field of the egress frame; and
when the second MAC address matches the first MAC address, drop the ingress frame.
9. The network element of claim 8 , further comprising instructions executable to:
countdown a first aging time after storing the egress frame; and
after the first aging time has elapsed, delete the first MAC address.
10. The network element of claim 8 , wherein the instructions to snoop the egress frame include instructions to:
select the first egress frame at random.
11. The network element of claim 8 , wherein the instructions to monitor the ingress frame are performed for each ingress frame received from the customer network.
12. The network element of claim 8 , wherein the service provider network implements a connection oriented Ethernet serving the customer network.
13. The network element of claim 12 , further comprising instructions executable to:
store a first virtual local area network (VLAN) tag from a second source field of the egress frame;
wherein the instructions to monitor the ingress frame received from the customer network include instructions to compare a second VLAN tag in the second source field of the ingress frame with the first VLAN tag; and
when the second VLAN tag matches the first VLAN tag, drop the ingress frame.
14. The network element of claim 13 , further comprising instructions executable to:
countdown a second aging time after storing the egress frame; and
after the second aging time has elapsed, delete the first VLAN tag.