Apparatus and methods for establishing virtual private networks in a broadband network

ES 2 386 630 T3

EQUIPMENT AND METHODS FOR ESTABLISHING PRIVATE VIRTUAL NETWORKS IN A BROADBAND NETWORK

Description

RELATED APPLICATIONS

[0001] This application refers to an application called "Apparatus and Methods for Managing Packets in a Broadband Data Stream" filed on December 15, 2000, with the number US-737916, an application called "Apparatus and Methods for Scheduling Packets in a Broadband Data Stream" filed on December 15, 2000, under the number US-737917, and an application called "Apparatus and Methods for Processing Packets in a Broadband Data Stream" filed September 13, 2000, under number US-661244.

SCOPE OF THE INVENTION

[0002] The present invention relates to the equipment and methods necessary to establish virtual private networks. In particular, this invention relates to the equipment and methods necessary to establish virtual private networks in a broadband network.

BACKGROUND OF THE INVENTION

[0003] As the internet becomes a global commercial data network for electronic commerce and the management of public data services, more and more consumer demands have focused on the need for services of the most advanced Internet Protocol (JP) to improve the content of the accommodation, the dissemination of videos and the application of "outsourcing" (purchase of manufactured products in a foreign company to save costs). In order to remain competitive, network operators and internet service providers (ISPs) must resolve two main issues: continually meet the demands of growing backbone traffic and provide an appropriate Quality of Service (QoS) for that. traffic. Today, many ISP providers have implemented various virtual path techniques to overcome these new challenges.

ES 2 386 630 T3

In general, existing virtual path techniques require a build of overlapping networks and physical equipment. The best-known existing virtual path techniques are: the optical transport network, the asynchronous transfer mode (A77W) / frame relay (Ffí) or connection technique by means of switching frame relay, and the private virtual networks of the internet protocol. (JP VPN). Figure 1 schematically illustrates the existing common virtual paths for switching layers.

[0004] Optical transport technique 102 is the most commonly used virtual path technique. According to this technique, an ISP provider uses broadband bit pipes to tailor a point-to-point circuit or network for each consumer. Therefore, this technique forces the ISP provider to create a new circuit or network each time a consumer is added. Once the circuit or network is created for a consumer, the bandwidth available to that circuit or network remains static.

[0005] The ATM / FR 104 layer-switching technique provides Quality of Service (QoS) and traffic engineering through point-to-point virtual circuits. Thus, this technique does not require the physical creation of specific circuits or networks, as is the case with the optical transport technique 102. Although this technique 104 is an improvement of the optical transport technique 102, this technique 104 has various drawbacks. One of the major drawbacks of the ATM / FR 104 technique is that this type of technique is not scalable. Furthermore, the ATM / FR 104 technique also requires that a virtual circuit be established each time a request to send data is received from a consumer.

[0006] The IP VPN1Q6 narrowband network technique uses "best effort" forwarding and encrypted tunnels to provide secure routes to consumers. One of the biggest disadvantages of "best effort" shipping is the lack of guarantees that the package will even be shipped. Therefore, this type of forwarding is not a good option for transmitting critical data.

[0007] A media gateway and a label switching network are described in EP 1 065 858. The network comprises a main network, a plurality of label switching media gateways connected to the network and each of these provide an interface to one or more subscribed terminals. A Media Gateway Control Protocol (MGCP) is employed, allowing the call server to control the media gateways. The MGCP protocol comprises a signaling part to control simple line or link signaling systems and a connection part capable of making connections between IP, ATM, trame relay or other networks. Media gateways comprise

ES 2 386 630 T3 label switching media gateways connected to end nodes via multiprotocol label switching (MPLS), which in turn connect to the main network. The IP backbone provides MPLS conduits between nodes. MPLS are explicitly routed label switching routes. MPLS conduits are reserved for the exclusive use of label switching media gateways.

[0008] EP 1 069 742 describes a label switching network, in which calls are established between points by call servers. Call servers establish connections via concatenated series of routes or conduits through a multiprotocol label switching intermediary network. User information packets are transported through the network thanks to the association of an appropriate label.

[0009] Therefore, it is desirable to provide equipment and methods that reduce operating costs for service providers by joining multiple overlapping networks into a trunk IP service. In particular, it is desirable to provide equipment and methods that allow an ISP to build the network once and sell the network multiple times to multiple consumers.

SUMMARY OF THE INVENTION

The invention includes a method for establishing virtual private networks in a communication network. The method comprises the steps of creating a series of label switched link paths, assigning a link label to each of the label switched link paths, and configuring a series of logical service networks through multiprotocol labels. to transport the multiple private virtual network paths using the label switched link paths. According to an exemplary embodiment, each label switched link route provides a class of services and a link label associated with each main label switched route identifies the class of services that route provides. According to an exemplary embodiment, each label switched link route provides a class of services and a link label associated with each label switched link route identifies the class of services provided by that link. According to one embodiment, the creation step includes the step of creating a series of label switched link routes at each service location. A service provider may want to provide services at multiple service locations. According to an exemplary embodiment, the logical service networks are configured as follows:

ES 2 386 630 T3 statically by entering a service provider. According to another exemplary embodiment, the logical service networks are configured automatically by the software.

According to one embodiment, the method also comprises the steps of registering link labels in a multiprotocol label switching memory, assigning a unique identifier to a customer facility and registering that unique identifier on a link label. According to another embodiment, the method also comprises the steps of assigning a unique group identifier to the client facility for a client and establishing at least one virtual route between the client facilities.

The invention includes a private virtual network with a series of label switched link paths. A label switched link path is defined for a class of services. A link label identifies the class of services for the label switched link path. A number of service logical networks are configured by multiprotocol labels to carry the multiple virtual private paths using the label switched link paths.

[0013] A number of label switched link paths may be defined at each serving location. The series of logical service networks can be configured statically or automatically. In one embodiment, the link label is registered in a multiprotocol label switch memory. A unique identifier can be assigned to a customer installation by registering it on a binding tag. A unique group identifier can be associated with customer facilities for a particular customer. The virtual private network uses the unique group identifier to form at least one virtual path between customer facilities.

The invention enables service providers to reduce multiple overlapping networks by creating multiple logical service networks (LSNs) over a physical or fiber optic network. LSNs are established by a service provider and can be characterized by type of traffic, bandwidth, delay, hop count, assured information flow, and / or restoration priorities. Once established, LSN networks allow the service provider to provide a variety of services to multiple consumers depending on the traffic specifications of each customer. For example, different LSN networks handle different specification traffic, depending on the characteristics of each LSN network. Furthermore, such LSN networks, once built within a broadband network, can be adapted and sold to multiple customers.

ES 2 386 630 T3

BRIEF DESCRIPTION OF THE DRAWINGS

[0015]

FIG.1 schematically illustrates a prior art for implementing virtual routes.

FIG.2 schematically illustrates the exemplary implementation of a virtual route according to an embodiment of the invention.

FIG. 3 schematically illustrates exemplary LSN networks in accordance with one embodiment of the invention.

FIG. 4 schematically illustrates a VPN virtual private network according to an embodiment of the invention.

FIG. 5 schematically illustrates an exemplary virtual route for a customer in accordance with an embodiment of the invention.

FIG. 6 schematically illustrates an exemplary virtual route for multiple clients in accordance with one embodiment of the invention.

DETAILED DESCRIPTION OF THE INVENTION

[0016] FIG. 2 schematically illustrates the switch layer virtual path 200 according to one embodiment of the invention. The switch layer virtual path 200 combines switching and routing to provide virtual services. In particular, the switching layer virtual path 200 combines the advantages of layer 106 (eg scalability and flexibility) and layer 202 (eg security and quality of service). According to FIG. 2, a multiprotocol label switching layer 202 replaces the ATM / FR switching layer 104 of FIG. 1. Multiple label switched link paths (LSP links) are established as link groups at the optical transport layer 102 to carry multiple virtual routing service (VRS) paths 206. LSP link paths allow providers service control traffic. According to an exemplary embodiment, virtual routing networks 204 are located at the end of MPLS switching layer 202. VRS routes 206 are connected to virtual routing networks 204 via MPLS switching layer 202. According to one embodiment , VRS routing networks 204 are uniquely identified; therefore, safety is guaranteed. According to an exemplary embodiment, non-VRS traffic is directed to an internet router through the IP internet routing layer 106. According to a

In an embodiment, the switch layer virtual route 200 does not maintain the internet routing tables known from this technique.

[0017] FIG. 3 schematically illustrates an exemplary LSN network in accordance with one embodiment of the invention. A service provider creates LSP links at each service location. For example, multiple LSP links are created in San Francisco (SFO), Saint Louis (STL), Chicago, and New York (NYC). According to an exemplary embodiment, an LSP link can be implemented using the technology described in the commonly named co-pending patent applications: "Apparatus and Methods for Managing Packets in a Broadband Data Stream" filed December 15, 2000, under number US-737916, an application called "Apparatus and Methods for Scheduling Packets in a Broadband Data Stream ”filed December 15, 2000, under number US-737917, and an application called "Apparatus and Methods for Processing Packets in a Broadband Data Stream" filed September 13, 2000, under number US-661244.

According to an exemplary embodiment, each LSP link is identified with a link label. According to one embodiment, said link label also identifies the class of services assigned to the associated LSP link. According to one embodiment, the link labels (302, 304, 306 and 308) are recorded in an MPLS memory. LNS networks are established based on the LSP links created. According to one embodiment, the LNS networks are established statically by introducing a service provider. According to another embodiment, the LSNs are established automatically by the software. After LSNs are established or built, customer and customer traffic can be custom added to those networks.

[0019] FIG. 4 schematically illustrates an exemplary VPN network for a client according to an embodiment of the invention. In FIG. 4, Customer A signs up for services at multiple locations (customer premises). According to one embodiment, each customer installation is assigned a unique identifier (for example a VPN label). According to an exemplary embodiment, said unique identifier is recorded at the top of the link tag in the MPLS memory. For example, in FIG. 4, Customer A at location 1 is assigned tag 402 registered on top of LSP link network 302, Customer A at location 2 is assigned tag 404 registered on top of LSP link network 304, and customer A at location 3 is assigned the

ES 2 386 630 T3 tag 406 registered at the top of the LSP 308 link network. According to an exemplary embodiment, the customer facilities for a customer are grouped together and assigned a single group of network VPN tags called " TO". The single group of VPN "A" network labels associates the client premises of client "A" with a private network.

[0020] FIG. 5 schematically illustrates exemplary virtual routes for a client in accordance with one embodiment of the invention. A private IP route is established to guide traffic between customer facilities. For example, a private IP route 502 is established between location 1 and location 2, a private IP route 504 is established between location 2 and location 3, and a private IP route 506 is established between location 1 and location 3. According to an exemplary embodiment, a private IP route is a logical route. Private IP routes 502, 504, and 506 are unique to customer A and can be monitored.

According to one embodiment, the private IP routes for each client are associated with each other by a unique group of VPN labels. According to an exemplary embodiment, the private IP routes established for each consumer and the associated unique group of VPN labels provide security assurance. In addition, the LSP links (302, 304 and 308) at each customer facility associate data with a known quality and / or class of service.

[0022] FIG. 6 schematically illustrates multiple VPN networks established for multiple clients in accordance with one embodiment of the invention. In FIG. 6, Customer B signs up for services from multiple locations (customer premises). A single VPN label is assigned to each client installation (location) for client B. As shown, customer B at location 1 is assigned a tag 602 registered at the top of the LSP link path 302, customer B at location 2 is assigned a tag 604 registered at the top of the link path 306, and customer B at location 3 is assigned a tag 606 registered at the top of the LSP link path 308. According to an exemplary embodiment, the customer facilities for customer B are grouped together and assigned a group of VPN labels called "B". The VPN tag group named "B" associates customer B's facilities on a private network. Next, a VPN network is established for client B. For example, an IP 608 private route is established between location 1 and location 2, an IP 610 private route is established between location 2 and location 3, and an IP 612 private route is established between location 1 and location 3. IP private routes 608, 610, and 612 are unique to customer B and can be monitored.

ES 2 386 630 T3

[0023] Generally, the separation of the service plane from the network provides significant scalability advantages, in the sense that the network does not need to know the final services offered after providing the adequate quality of the transport service. (QoS). For example, a company can set QoS quality parameters and design a network using a combination of LSP link paths. LSP link path signalings are propagated and passed from node to node using, for example, common signaling techniques such as Resource Reservation Protocol (RSVP) or Limited Routing Label Distribution Protocol (CR-LDP) The network and link verification parameters are set in advance. After establishing the network, the company can add clients to the end of the network. End-to-end services are signaled end-to-end regardless of whether the network or LSP link knows that signaling is taking place. In a sense, the creation of the service only affects the end node where the service is actually created. Therefore, the creation of the service is scalable because it is signaled from start to finish. Any failure in the network is solved at the network level, for example, by reestablishing the LSP link routes that are normally of a smaller magnitude than the number of services that circulate on those links.

The above examples illustrate certain exemplary embodiments of the invention from which other embodiments, or variations and modifications will be apparent to those skilled in the art. The invention should not, therefore, be limited to the embodiments discussed above, rather it is defined by the claims.