Securing layer-3 virtual private network
US-2018331949-A1 · Nov 15, 2018 · US
US11716280B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11716280-B2 |
| Application number | US-202217805616-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 6, 2022 |
| Priority date | Apr 4, 2019 |
| Publication date | Aug 1, 2023 |
| Grant date | Aug 1, 2023 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A system and method are disclosed for enabling interoperability between asymmetric and symmetric Integrated Routing and Bridging (IRB) modes. A system is configured to receive a route advertisement, examine the label fields of the route advertisement, and determine whether Layer 2 or Layer 3 information is conveyed. The system is further configured to build a route advertisement to advertise to a second device based on whether Layer 2 or Layer 3 information is conveyed in the first route advertisement.
Opening claim text (preview).
The invention claimed is: 1. A method for interoperating between provider edge routers operating in symmetric and asymmetric integrated routing and bridging (IRB) modes, the method comprising: receiving a first Ethernet Virtual Private Network (EVPN) advertisement route with a Media Access Control/Internet Protocol (MAC/IP) route (EVPN MAC/IP advertisement route) sent by a first provider edge router operable in asymmetric IRB mode at an interoperating provider edge router, the first EVPN MAC/IP advertisement route including an IP address corresponding to the first provider edge router; examining Multiprotocol Label Switching (MPLS) labels associated with the first EVPN MAC/IP advertisement route, and determining that the MPLS labels do not contain an IP Virtual Route Forwarding (IP-VRF) Route Target; adding, based on information in the first EVPN MAC/IP advertisement route, an Address Resolution Protocol (ARP) entry to an ARP table, the ARP entry including a MAC address and the IP address from the first EVPN MAC/IP advertisement route; and adding a MAC entry to a MAC table identified by a Border Gateway Protocol (BGP) target of a MAC-VRF. 2. The method of claim 1 , further comprising: advertising, by the interoperating provider edge router, first and second route targets, the first route target corresponding to the MAC address and the second route target corresponding to the information from the ARP table. 3. The method of claim 1 , further comprising, at the interoperating provider edge router, directing inter-subnet traffic forwarding based upon the first EVPN MAC/IP advertisement route. 4. The method of claim 1 , further comprising: receiving, at the interoperating provider edge router, a second EVPN MAC/IP advertisement route sent by a second provider edge router operable in symmetric IRB mode; examining the MPLS labels associated with the second EVPN MAC/IP advertisement route, and determining that the MPLS labels in the second EVPN MAC/IP advertisement route include a Label2 field and an IP-VRF Route Target; adding an IP route from the second EVPN MAC/IP advertisement route to an IP-VRF table; and adding the MAC address from the second EVPN MAC/IP advertisement route to the MAC table. 5. The method of claim 4 , further comprising: advertising, by the interoperating provider edge router, third and fourth route targets, the third route target corresponding to the MAC address from the second EVPN MAC/IP advertisement route and the fourth route target corresponding to an IP address from the second EVPN MAC/IP advertisement route. 6. A provider edge router interoperable with both symmetric and asymmetric IRB modes (PE), the interoperable PE comprising: at least one processor and at least one memory storing processor-interpretable instructions, which when executed by the at least one processor, cause the interoperable PE to: receive a first Ethernet Virtual Private Network (EVPN) advertisement route with a Media Access Control/Internet Protocol (MAC/IP) route (EVPN MAC/IP advertisement route) sent by a first provider edge router operable in asymmetric IRB mode, the first EVPN MAC/IP advertisement route including an IP address corresponding to the first provider edge router; examine Multiprotocol Label Switching (MPLS) labels associated with the first EVPN MAC/IP advertisement route; determine that the MPLS labels do not include an IP Virtual Route Forwarding (IP-VRF) Route Target; add, based on information in the first EVPN MAC/IP advertisement route, an Address Resolution Protocol (ARP) entry to an ARP table, the ARP entry including a MAC address and the IP address from the first EVPN MAC/IP advertisement route; and add a MAC entry to a MAC table identified by a Border Gateway Protocol (BGP) target of a MAC-VRF. 7. The interoperable PE of claim 6 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: advertise first and second route targets, the first route target corresponding to the MAC address and the second route target corresponding to the information from the ARP table. 8. The interoperable PE of claim 6 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: direct inter-subnet traffic forwarding based upon the first EVPN MAC/IP advertisement route. 9. The interoperable PE of claim 6 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: receive a second EVPN MAC/IP advertisement route sent by a second provider edge router operable in symmetric IRB mode; examine the MPLS labels associated with the second MAC/IP advertisement route; determine that the MPLS labels in the second EVPN MAC/IP advertisement route include a Label2 field and an IP-VRF Route Target; add an IP route from the second EVPN MAC/IP advertisement route to an IP-VRF table; and add the MAC address from the second EVPN MAC/IP advertisement route to the MAC table. 10. The interoperable PE of claim 9 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: advertise third and fourth route targets, the third route target corresponding to the MAC address from the second EVPN MAC/IP advertisement route and the fourth route target corresponding to an IP address from the second EVPN MAC/IP advertisement route. 11. A non-transitory computer readable medium storing processor-interpretable instructions, which when executed by at least one processor, cause a provider edge router capable of interoperating with both symmetric and asymmetric IRB modes (interoperable PE) to: receive a first Ethernet Virtual Private Network (EVPN) advertisement route with a Media Access Control/Internet Protocol (MAC/IP) route (EVPN MAC/IP advertisement route) sent by a first provider edge router operable in asymmetric IRB mode, the first EVPN MAC/IP advertisement route including an IP address corresponding to the first provider edge router; examine Multiprotocol Label Switching (MPLS) labels associated with the first EVPN MAC/IP advertisement route; determine that the MPLS labels do not include an IP Virtual Route Forwarding (IP-VRF) Route Target; add, based on information in the first EVPN MAC/IP advertisement route, an Address Resolution Protocol (ARP) entry to an ARP table, the ARP entry including a MAC address and the IP address from the first EVPN MAC/IP advertisement route; and add a MAC entry to a MAC table identified by a Border Gateway Protocol (BGP) target of a MAC-VRF. 12. The non-transitory computer readable medium of claim 11 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: advertise first and second route targets, the first route target corresponding to the MAC address and the second route target corresponding to the information from the ARP table. 13. The non-transitory computer readable medium of claim 11 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: direct inter-subnet traffic forwarding based upon the first EVPN MAC/IP advertisement route. 14. The non-transitory computer readable medium of claim 11 , further comprising instructions, which when executed by the at least one processor, cause the interoperable PE to: receive a second EVPN MAC/IP advertisement route sent by a second provider edge router operable in symmetric IRB mode; examine the MPLS labels associated with the second EVPN MAC/IP advertisement route; determine that the MPLS labels in the second EVPN MA
Label distribution · CPC title
Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title
Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title
Arrangements for connecting between networks having differing types of switching systems, e.g. gateways · CPC title
using an overlay routing layer · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.