Processing inter-VLAN traffic in an ethernet tree

Patent metadata

Field	Value
Publication number	US-10187304-B2
Application number	US-201615058416-A
Country	US
Kind code	B2
Filing date	Mar 2, 2016
Priority date	Mar 2, 2016
Publication date	Jan 22, 2019
Grant date	Jan 22, 2019

Abstract

A device may receive, from a first device associated with a first LAN, network traffic destined for a second LAN. The device may provide the first LAN with access to a core network. The device may not provide the second LAN with access to the core network. The device may identify, based on the network traffic, a Layer 3 address associated with a second device. The second device may be associated with the second LAN. The device may determine that the first device is categorized as a leaf device within an Ethernet Tree provided by the device. The device may determine, based on the Layer 3 address, that the second device is categorized as a leaf device within the Ethernet Tree. The device may drop the network traffic based on determining that the first device and the second device are categorized as leaf devices within the Ethernet Tree.

First claim

What is claimed is:

1. A provider edge device, comprising:
an input component; and
one or more processors to:
receive, from a first customer edge device associated with a first local area network, network traffic destined for a second local area network,
the provider edge device providing the first local area network with access to a core network,
the provider edge device not providing the second local area network with access to the core network;

identify, based on the network traffic, a Layer 3 address associated with a second customer edge device,
the second customer edge device being associated with the second local area network;

receive, from another provider edge device that removes Layer 2 information from traffic transmitted to the provider edge device, the Layer 3 address and a tree node type indicator associated with the Layer 3 address,
the tree node type indicator associated with the Layer 3 address indicating that the second customer edge device, associated with the Layer 3 address, is categorized as a leaf device within an Ethernet Tree service;

determine that the first customer edge device is categorized as a leaf device within the Ethernet Tree service provided by the provider edge device;
determine, based on the Layer 3 address and the tree node type indicator associated with the Layer 3 address, that the second customer edge device is categorized as the leaf device within the Ethernet Tree service; and
drop the network traffic based on determining that the first customer edge device and the second customer edge device are categorized as leaf devices within the Ethernet Tree service.

2. The provider edge device of claim 1 , where the Layer 3 address is an Internet Protocol address.

3. The provider edge device of claim 1 , where the one or more processors are further to:
store the Layer 3 address and the tree node type indicator in a Layer 3 data structure.

4. The provider edge device of claim 3 , where the one or more processors, when determining that the second customer edge device is categorized as a leaf device within the Ethernet Tree service, are to:
use the Layer 3 data structure to determine that the second customer edge device is categorized as a leaf device within the Ethernet Tree service.

5. The provider edge device of claim 1 , where the Layer 3 address is a first Layer 3 address; and
where the one or more processors are further to:
determine a second Layer 3 address associated with the first customer edge device;
store, in a Layer 3 data structure, the second Layer 3 address in association with the tree node type indicator that indicates that the first customer edge device is categorized as a leaf device within the Ethernet Tree service; and
provide the second Layer 3 address and the tree node type indicator to another provider edge device.

6. The provider edge device of claim 5 , where the one or more processors are further to:
determine that the network traffic is destined for the second local area network; and
where the one or more processors, when storing the second Layer 3 address in association with the tree node type indicator, are to:
store the Layer 3 address in association with the tree node type indicator based on determining that the network traffic is destined for the second local area network.

7. A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors of a first network device, cause the one or more processors to:
receive, from a second network device associated with a first local area network, network traffic destined for a second local area network,
the first network device providing the second network device with access to a core network;

identify, based on the network traffic, an Internet Protocol (IP) address associated with a third network device,
the third network device being associated with the second local area network,
the first network device not providing the third network device with access to the core network;

receive, from a fourth network device that removes the IP address from traffic transmitted to the first network device, the IP address and a tree node type indicator associated with the IP address,
the tree node type indicator associated with the IP address indicating that the third network device, associated with the IP address, is categorized as a leaf device within an Ethernet Tree service;

determine whether the second network device is categorized as a root device or a leaf device within the Ethernet Tree service provided by the first network device;
determine, based on the IP address and the tree node type indicator associated with the IP address, whether the third network device is categorized as the root device or the leaf device within the Ethernet Tree service; and
selectively drop or transmit the network traffic based on:
determining whether the second network device is categorized as a root device or a leaf device within the Ethernet Tree service, and
determining whether the third network device is categorized as a root device or a leaf device within the Ethernet Tree service.

8. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
determine that at least one of the second network device or the third network device is categorized as a root device within the Ethernet Tree service; and
where the one or more instructions, that cause the one or more processors to selectively drop or transmit the network traffic, cause the one or more processors to:
transmit the network traffic based on determining that at least one of the second network device or the third network device is categorized as a root device within the Ethernet Tree service.

9. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
determine that both the second network device and the third network device are categorized as leaf devices within the Ethernet Tree service; and
where the one or more instructions, that cause the one or more processors to selectively drop or transmit the network traffic, cause the one or more processors to:
drop the network traffic based on determining that both the second network device and the third network device are categorized as leaf devices within the Ethernet Tree service.

10. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
store, in a data structure that stores Layer 3 information, the IP address in association with the tree node type indicator that indicates whether the third network device, associated with the IP address, is categorized as a root device or a leaf device within the Ethernet Tree service.

11. The non-transitory computer-readable medium of claim 10 , where the one or more instructions, that cause the one or more processors to determine whether the third network device is categorized as a root device or a leaf device within the Ethernet Tree service, are to:
look up the tree node type indicator, in the data structure, using the IP address; and
determine whether the third network device is categorized as a root device or a leaf device within the Ethernet Tree service based on the tree node type indicator.

12. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, that cause the one or more pr

Assignees

• Juniper Networks Inc

Inventors

• Sharma Manoj
• Lin Wen
• Singh Nitin
• Drake John E

Classifications

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L45/48 Primary

  Routing tree calculation · CPC title

• H04L45/74

  Address processing for routing · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L12/1886

  with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains · CPC title