US Patent No. 9,166,929

PERFORMING SCALABLE L2 WHOLESALE SERVICES IN COMPUTER NETWORKS USING CUSTOMER VLAN-BASED FORWARDING AND FILTERING


Patent No. 9,166,929
Issue Date October 20, 2015
Title Performing Scalable L2 Wholesale Services In Computer Networks Using Customer Vlan-based Forwarding And Filtering
Inventorship Prakash Kamath, San Jose, CA (US)
Apurva Mehta, Cupertino, CA (US)
Debi Prasad Sahoo, San Jose, CA (US)
Jagadish Grandhi, Hyderabad (IN)
Krishna Sankaran, Milpitas, CA (US)
Moojin Jeong, San Jose, CA (US)
Assignee Juniper Networks, Inc., Sunnyvale, CA (US)

Claim of US Patent No. 9,166,929

1. A method comprising:
by a network switch, storing data defining a reduced layer two (L2) learning table associated with a core-facing interface
that couples the network switch to a service provider core network, wherein the L2 learning table includes a plurality of
entries, each entry from the plurality of entries having a first portion associated with a service virtual local area network
(SVLAN) within the service provider core network and a second portion associated with a plurality of customer virtual local
area networks (CVLANs) associated with the SVLAN, the second portion indicating whether each of the plurality of CVLANs in
combination with the SVLAN is learned and authenticated at the core-facing interface;

receiving, by the network switch, a packet data unit (PDU) specifying an SVLAN and a CVLAN;
determining, by the network switch and without using an L2 address of the PDU, whether the reduced L2 learning table indicates
a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface;

by the network switch and in response to determining the reduced L2 learning table indicates a combination of the SVLAN and
CVLAN specified by the PDU is learned and authenticated at the core-facing interface, switching the PDU; and

by the network switch and in response to determining the reduced L2 learning table does not indicate a combination of the
SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface, filtering the PDU.