Patent ID: 9166929
Filing Date: 2015-10-20
Classification: H04L

Abstract:
1. A method comprising: by a network switch, storing data defining a reduced layer two (L2) learning table associated with a core-facing interface that couples the network switch to a service provider core network, wherein the L2 learning table includes a plurality of entries, each entry from the plurality of entries having a first portion associated with a service virtual local area network (SVLAN) within the service provider core network and a second portion associated with a plurality of customer virtual local area networks (CVLANs) associated with the SVLAN, the second portion indicating whether each of the plurality of CVLANs in combination with the SVLAN is learned and authenticated at the core-facing interface; receiving, by the network switch, a packet data unit (PDU) specifying an SVLAN and a CVLAN; determining, by the network switch and without using an L2 address of the PDU, whether the reduced L2 learning table indicates a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface; by the network switch and in response to determining the reduced L2 learning table indicates a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface, switching the PDU; and by the network switch and in response to determining the reduced L2 learning table does not indicate a combination of the SVLAN and CVLAN specified by the PDU is learned and authenticated at the core-facing interface, filtering the PDU.