Method and system for transparent LAN services in a packet network

1. A network apparatus, comprising:

a customer network portion having a customer premises equipment (CPE) bridge configured to connect to internal network entities of the customer network portion and, via Point to Point (P2P) connections, to edge bridges of a provider network portion interconnecting separate customer network portions,

wherein the CPE bridge is configured to:

determine a transparent local area network service (TLS) for a packet received from one of the internal network entities based on a media access control (MAC) address of a destination of the packet in a different separate customer network portion, and

modify the packet to indicate the determined TLS, for the provider network portion to utilize to transmit the packet, via a P2P connection, based on the determined TLS to a second CPE bridge associated with the destination, without the provider network learning the destination MAC address.

2. The network apparatus of claim 1 , further comprising:

the provider network portion having a plurality of edge bridges configured to perform the transmitting the packet via P2P connections to the second CPE bridge associated with the destination based on the determined TLS without learning the destination MAC address.

3. The network apparatus of claim 1 , wherein the CPE bridge includes a first interface to communicate with the internal network entities of the customer network portion and a second interface to communicate with at least one edge bridge of the provider network portion.

4. The network apparatus of claim 1 , wherein the CPE bridge includes a memory and a processor configured to store and execute program instructions to: receive the packet from the internal network entity, determine from the received packet the destination MAC addresses, determine a TLS service tag based on the destination MAC address, modify the received packet to include the TLS service tag, and transmit the modified packet to one of the edge bridges of the provider network portion.

5. The network apparatus of claim 1 , wherein each edge bridge includes a processor and memory configured to store and execute program instructions to: receive the modified packet from the CPE bridge, determine a destination CPE bridge and corresponding edge bridge based on the TLS service tag, and transmit the modified packet toward the destination CPE bridge and corresponding edge bridge through the provider network portion according to the TLS service tag.

6. The network apparatus of claim 1 , wherein the CPE bridge is further configured to: receive a second packet, having a second TLS service tag, from the edge bridge, determine from the received second packet a port internal to the customer network portion, modify the received second packet to remove the second TLS service tag, and transmit the modified received second packet to a destination internal to the customer network portion.

7. The network apparatus of claim 1 , further comprising: a plurality of the customer network portions, separate from each other and interconnected by the provider network portion.

8. The network apparatus of claim 7 , wherein the CPE bridge includes a memory configured to store associations between each possible source-destination pair of CPE bridges and TLS service tags.

9. The network apparatus of claim 7 , further comprising an edge bridge of the provider portion having a memory configured to store associations between each possible source-destination pair of CPE bridges and TLS service tags.

10. The network apparatus of claim 1 , wherein the CPE bridge is configured to learn associations between customer network portion MAC addresses and TLS service tags by examining and recording associations between MAC addresses and TLS service tags of packets incoming to the CPE bridge from the different separate customer network portions.

11. The network apparatus according to claim 1 , wherein said packet is an Ethernet packet.