Performing scalable L2 wholesale services in computer networks using customer VLAN-based forwarding and filtering

摘要

In general, techniques are described that facilitate scalable wholesale layer two (L2) connectivity between customers and service providers and a demarcation between the L2 wholesale network and one or more ISPs with which customers communicate L2 PDUs. In one example, a network device receives PDU having both a service identifier identifying a service virtual local area network (SVLAN) and a customer identifier identifying a customer VLAN (CVLAN). A virtual switch determines whether an entry of a L2 learning table is associated with both the service identifier and the customer identifier of the PDU. When no such entry exists, a VLAN learning module updates the L2 learning table to create a new entry that maps to a network device interface and is associated with both the service identifier of the PDU and a plurality of customer identifiers that includes the customer identifier of the PDU.

主权项

1. A method comprising:
by a network switch, storing data defining a reduced layer two (L2) learning table associated with a core-facing interface that couples the network switch to a service provider core network, wherein the L2 learning table includes a plurality of entries, each entry from the plurality of entries having a first portion associated with a service virtual local area network (SVLAN) within the service provider core network and a second portion associated with a plurality of customer virtual local area networks (CVLANs) associated with the SVLAN, the second portion indicating whether each of the plurality of CVLANs in combination with the SVLAN is learned and authenticated at the core-facing interface; receiving, by the network switch, a packet data unit (PDU) specifying an SVLAN and a CVLAN; determining, by the network switch and without using an L2 address of the PDU, whether the reduced L2 learning table indicates a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface; by the network switch and in response to determining the reduced L2 learning table indicates a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface, switching the PDU; and by the network switch and in response to determining the reduced L2 learning table does not indicate a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface, filtering the PDU.