Juniper Networks, Inc.

Ericsson Ab

Redback Networks Inc.

Pulse Secure, LLC

Juniper Netwoks, Inc.

Rahul Aggarwal

Yakov Rekhter

Anil Lohiya

Nischal Sheth

George Apostolopoulos

Nitin Bahadur

Liming Wei

Ajay M Patel

Ravi Shekhar

Jerome Pascal Moisand

Umesh Krishnaswamy

Sanjay Wadhwa

Bhupesh Kothari

Pedro Miguel Martins Roque Marques

Benjamin Hickey

Swaminathan Pichumani

Kireeti Kompella

Hendrikus G P Bosch

Apurva Mehta

John E Drake

David M Katz

Harish Sitaraman

Thomas Wayne Anderson

Jaihari V Loganathan

Yimin Shen

Bin William Hong

Serpil Bayraktar

Srinivasa Chaganti

Jeelani Syed

Lili Wang

Hartmut Schroeder

Ravi Chandra

Disha M Chopra

Prem Ananthakrishnan

Sheth Nischal

Pulikeshi Vitalapura Ramanath

A source edge router initiates point-to-point (P2P) label switched paths (LSPs) to multiple receiver edge routers, sends one or more PATH messages to one or more nodes downstream of the source edge router for the P2P LSPs, wherein each one of the set of PATH messages includes a same identifier of a point-to-multipoint (P2MP) LSP that includes a session object that contains a tunnel identifier and a P2MP identifier, and receives from each of those nodes downstream of the source edge router, a set of one or more RESV messages, wherein each one of the received RESV messages received from a respective node downstream of the source edge router includes the identifier of the P2MP LSP and a label allocated by that node downstream of the source edge router.

MPLS traffic engineering for point-to-multipoint label switched paths

In general, a mobile virtual private network (VPN) is described in which service provider networks cooperate to dynamically extend a virtual routing area of a home service provider network to the edge of a visited service provider network and thereby enable IP address continuity for a roaming wireless device. In one example, a home service provider network allocates an IP address to a wireless device and establishes a mobile VPN. The home service provider network dynamically provisions a visited service provider network with the mobile VPN, when the wireless device attaches to an access network served by the visited service provider network, to enable the wireless device to exchange network traffic with the visited service provider network using the IP address allocated by the home service provider network.

Virtual private networking with mobile communication continuity

A label switched path (LSP) is established within a network using an MPLS fast reroute bypass tunnel when a resource along a primary path of the LSP has failed but is protected by the MPLS fast reroute bypass tunnel. While establishing the LSP, a network device identifies a failed resource along a primary path of the LSP. In response to identifying the failed resource, the network device determines whether a bypass tunnel exists from the network device to a node along the primary path, wherein the bypass tunnel avoids the failed resource. Upon determining that the bypass tunnel exists, the network device tunnels a message for establishing the LSP to the node over the bypass tunnel.

Label switched path setup using fast reroute bypass tunnel

Principles of the invention relate to techniques for transmission of Layer 2 (L2) traffic over a point to multi-point (P2MP) label switched path (LSP) within a multi-protocol Label Switching (MPLS) network. A source or ingress network device may implement the techniques to connect multiple L2 interfaces to a P2MP LSP within an MPLS network via a P2MP Pseudo-Wire (PW) mechanism that emulates delivery of L2 data units over a packet switched network, such as the MPLS network. The ingress network device first establishes the P2MP LSP and then connects two or more L2 interfaces to the P2MP LSP via the P2MP PW mechanism. Egress network devices may also implement the techniques to terminate the P2MP LSP and de-multiplex traffic arriving via multiple P2MP PWs carried over the same P2MP LSP.

Transmission of layer two (L2) multicast traffic over multi-protocol label switching networks

Techniques are described for supporting PIM (Protocol Independent Multicast) Dense Mode (PIM-DM) and PIM Bootstrap Router (PIM-BSR) between different VPN sites of an IP VPN. A system includes a plurality of customer sites connected to a service provider network by provider edge (PE) routers that provide an IP VPN. A first one of the PE routers receives multicast traffic from a first one of the customer sites, wherein the multicast traffic is PIM (Protocol Independent Multicast) Dense Mode (PIM-DM) traffic for which no PIM join messages have been received by the first PE router from the other PE routers via BGP messages. A tunnel setup module of the first PE router is configured to automatically signal a provider tunnel through the service provider network upon receiving the PIM-DM multicast traffic without maintaining multicast state data for a multicast group associated with the PIM-DM multicast traffic.

Inter-site PIM-dense mode and PIM-BSR support for MPLS/BGP IP VPNs

This disclosure describes techniques for supporting an and Multi-Protocol Label Switching (MPLS)-based Virutal Private Network (VPN) service that provides layer two (L2) connectivity between the customer edge device. In particular, the techniques support a Border Gateway (BGP) MPLS-based MAC VPNs ('MAC-VPN' or 'MAC VPN'). The techniques provide a MAC VPN in which L2 MAC address learning occurs in the control plane via inter-device BGP signaling in the control plane rather than the data plane, in response to VPN traffic, as may be typical with other VPN technologies.

Layer two virtual private network having control plane address learning supporting multi-homed customer networks

A network device receives a join request on a downstream interface, wherein the join request specifies a source device and multicast group, wherein the network device is positioned within a core network of a multicast virtual private network (MVPN) that transmits multicast traffic between the source device and a plurality of receivers associated with customer sites. The network device selects an upstream router to which to send the join request from among a plurality of upstream routers on paths leading to the source device, so as to avoid creating a join request loop in the core network. At least one of the upstream routers is positioned on an Exterior Border Gateway Protocol (EBGP) path toward the source device, and at least one of the upstream routers is positioned on an Interior BGP (IBGP) path toward the source device. The network device sends the join request to the selected upstream device.

Load balancing multicast join requests over interior and exterior BGP paths in a MVPN

A method performed by a provider edge device includes generating pseudo-wire tables based on virtual private local area network service advertisements from other provider edge devices, where the provider edge device services customer edge devices, and establishing pseudo-wires with respect to the other provider edge devices, based on the pseudo-wire tables, where the pseudo-wires include an active pseudo-wire and at least one standby pseudo-wire with respect to each of the other provider edge devices. The method also includes generating and advertising VPLS advertisement to the other provider edge devices, detecting a communication link failure associated with one of the customer edge devices in which the provider edge device services, and determining whether the at least one standby pseudo-wire needs to be utilized because of the communication link failure.

Redundant pseudowires for border gateway patrol-based virtual private local area network service multi-homing environments

An ingress router of a provider network receives a packet from a customer network, determines that the packet includes a customer network label and that the packet is to be tunneled through the provider network, based on the determination, adds a delimiter label to the packet indicative of a bottom of a provider network label stack and one or more provider network labels to the packet, and forwards the packet to a next routing device along the provider network tunnel. An egress routing device of the provider network receives a packet comprising a provider network label stack, removes the provider network label stack from the packet, determines whether the packet comprises a delimiter label following the provider network label stack, and, when the packet comprises the delimiter label, forwards the packet to a customer network interface device.

Network tunneling using a label stack delimiter

The invention is directed toward techniques for Multi-Protocol Label Switching (MPLS) upstream label assignment for the Resource Reservation Protocol with Traffic Engineering (RSVP-TE). The techniques include extensions to the RSVP-TE that enable distribution of upstream assigned labels in Path messages from an upstream router to two or more downstream routers of tunnel established over a network. The tunnel may comprise a RSVP-TE P2MP Label Switched Path (LSP) or an Internet Protocol (IP) multicast tunnel. The techniques also include extensions to the RSVP-TE that enable a router to advertise upstream label assignment capability to neighboring routers in the network. The MPLS upstream label assignment using RSVP-TE described herein enables a branch router to avoid traffic replication on a Local Area Network (LAN) for RSVP-TE P2MP LSPs.

Upstream label assignment for the resource reservation protocol with traffic engineering

In some embodiments, an apparatus includes a first network device configured to receive, from a second network device, a first forwarding-state packet associated with a peripheral processing device and having a first generation identifier. The first network device is configured to receive, from a third network device, a second forwarding-state packet associated with the peripheral processing device and having a second generation identifier. The first network device is configured to implement forwarding-state information included in the first forwarding-state packet based on a comparison of the first generation identifier and the second generation identifier.

Methods and apparatus related to route selection within a network

Principles of the invention are described for providing multicast virtual private networks (MVPNs) across a public network that are capable of carrying high-bandwidth multicast traffic with increased scalability. In particular, the MVPNs may transport layer three (L3) multicast traffic, such as Internet Protocol (IP) packets, between remote sites via the public network. The principles described herein may reduce the overhead of protocol independent multicast (PIM) neighbor adjacencies and customer control information maintained for MVPNs. The principles may also reduce the state and the overhead of maintaining the state in the network by removing the need to maintain at least one dedicated multicast tree per each MVPN.

Auto-discovery of virtual private networks

A method and apparatus for providing point-to-multipoint label switch paths (LSPs) in a Multi-Protocol Label Switching (MPLS) network is described. In one embodiment, a point-to-multipoint LSP is built in a MPLS network by using Resource Reservation Protocol Traffic Engineering (RSVP-TE) to signal the point-to-multipoint LSP as separate point-to-point LSPs and to merge the separate point-to-point LSPs into the point-to-multipoint LSP.

Growing community of inventors

San Francisco, CA, United States of America

Rahul Aggarwal