Methods and apparatus to configure network nodes supporting virtual connections

摘要

A computer system includes functionality enabling a provider edge router to determine whether network data such as VRF information is properly associated with a corresponding virtual private network. A first node through which the network data is transmitted generates a signature value uniquely associated with the virtual private network. The first node forwards the signature value along with the network data to a second node of the physical network. The second node, in turn, verifies that the network data (such as VRF information) is properly associated with the second node (and virtual network) based on its own generation of a signature value, which is compared with the signature value received from the first node.

主权项

1. A method for verifying that network data is properly associated with a virtual network supported by a physical network, the method comprising:
receiving a first signature value from a sending node of the physical network at a communication interface of a receiving node, the first signature value uniquely associated with an identity of the virtual network connected by a virtual network connection across the physical network; receiving the network data including a data value from the sending node of the physical network at the communication interface of the receiving node; generating a second signature value at the receiving node based, at least in part, on the data value received from the sending node and on a key that identifies the virtual network connected by the virtual network connection across the physical network; comparing the received first signature value and the generated second signature value at a receiving node of the physical network to identify whether the network data is properly associated with the virtual network connected by the virtual network connection across the physical network; and supporting the virtual network through the sending node and the receiving node by updating Virtual Routing and Forwarding (VRF) information in the receiving node with Virtual Routing and Forwarding (VRF) information included in the network data in response to a match between the first signature value and the second signature value.