Patent ID: 8774047
Filing Date: 2014-07-08
Classification: H04L

Abstract:
1. A method for providing virtual private network (VPN) services between two or more autonomous systems, comprising providing an aggregation edge router in each of said two or more autonomous systems; configuring a first aggregation edge router in a first autonomous system to be a routing peer of at least two ingress edge routers of packets, the first autonomous system being an autonomous system of the packets' ingress edge routers, such that first packet switched tunnels are established between the at least two ingress edge routers and the first aggregation edge router; configuring the first aggregation edge router to be a routing peer of a second aggregation edge router in a second autonomous system, the second autonomous system being an autonomous system of at least two egress edge routers of the packets, such that a second packet switched tunnel is established between the aggregation edge routers; configuring the second aggregation edge router to be a routing peer of the packets' egress edge router in the second autonomous system such that third packet switched tunnels are established between the at least two egress routers and the second aggregation edge router; receiving, by the second aggregation edge router, a virtual private network-internet protocol (VPN-IP) route from the first aggregation edge router; importing, by the second aggregation edge router, the received VPN-IP route into at least one appropriate VPN Routing and Forwarding table (VRF); replacing, by the second aggregation edge router, associated route attributes of the received VPN-IP route by those configured to the at least one appropriate VRF in the second aggregation edge router, the route attributes including a route distinguisher (RD) and a route target (RT) of the VPN-IP route; setting, by the second aggregation edge router, a next hop attribute for the address to the second aggregation edge router; and re-advertising, by the second aggregation edge router, the received VPN-IP route so modified by the replacing and setting, to the packet's egress edge router; wherein no end-to-end tunnel between the ingress edge router and the egress edge router of each of the packets is established for the virtual private network services.