# Patent

## Title
Protection switching of virtual connections at the data link layer

## Abstract

A ring network is provided. The ring network includes a number of network elements, each including first and second switch fabrics. At least two uni-directional busses are coupled between the first and second switch fabrics. A number of ring segments are coupled between adjacent network elements to form first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route. The first and second switch fabrics of each network element are associated with one of the first and second routes. The first and second switch fabrics of each network element separately track the status of a number of virtual connections such that when an error is detected by one of the switch fabrics associated with a working route for a virtual connection, the switch fabric detecting the error communicates the change in state for the virtual connection to the other switch fabric over one of the first and second uni-directional busses to be used in a switching decision.

## Background
CROSS REFERENCE TO RELATED APPLICATIONS
This application is a continuation-in-part of commonly assigned application Ser. No. 09/410,402, entitled “Protection Switching of Virtual Connections” filed on Oct. 1, 1999 now U.S. Pat. No. 6,859,430 (the “'402 application), which is a continuation-in-part of co-pending, commonly assigned application Ser. No. 09/026,930, entitled “SYSTEM AND METHOD FOR PROTECTION SWITCHING OF VIRTUAL CONNECTIONS AT THE DATA LINK LAYER” filed on Feb. 20, 1998 now abandoned (the '930 application). The '930 application and the '402 application are incorporated by reference.


TECHNICAL FIELD
The present invention relates generally to the field of telecommunications and, in particular, to a system and method for protection switching of virtual connections at the data link layer.
BACKGROUND INFORMATION
Telecommunications networks carry various types of information between users, e.g., voice, data, video. A typical telecommunications network includes many components or modules that work together to make a connection between users. For example, a telecommunications network typically includes switches, transport lines, terminals and other conventional equipment used to create connections between users.
Errors can occur in any one of these modules of the network. For example, a fiber optic cable that carries signals for the network can be cut inadvertently or otherwise damaged such that it cannot acceptably carry data. To prevent errors of this nature from hindering communications, networks include redundant components so that when a working component stops functioning acceptably, a replacement or protection component can be switched into the network in place of the working component. Thus, the network is able to continue to carry information despite errors. This is referred to in the industry as network survivability, of which protection switching is an example which uses dedicated protection components.
In recent years, the telecommunications industry has begun developing new networks that carry user traffic over virtual connections in the form of cells or fixed-length packets of data, e.g., asynchronous transfer mode (ATM) networks. Each cell contains a header that includes information as to the destination of the cell or packet. At each network element (NE), the cells are routed through its network modules to the destination endpoint based on the identifiers in the header of the cell. Thus, the same transmission medium can be shared by many contemporaneous connections which span different parts of the network. These cell-based, as opposed to traditional time-slot based, networks introduce new problems into the area of network survivability. The redundant routes in the network may carry traffic for different virtual connections along various portions of the routes. If care is not taken in deciding how to effectuate protection switching for the various virtual connections involved, system capacity and availability could be adversely affected by switching a virtual connection that is, in fact, not affected by the failure.
For the reasons stated above, and for other reasons stated below which will become apparent to those skilled in the art upon reading and understanding the present specification, there is a need in the art for an improved system and method for protection switching in a network that uses virtual connections.
SUMMARY
The above mentioned problems with protection switching in a telecommunications system and other problems are addressed by the present invention. A circuit and method for protection switching at the data link layer is described which separately tracks the status of virtual connections at a network element to detect and switch from a working route to a protection route for a virtual connection when an error is detected that affects the working route for that virtual connection.
In particular, in one embodiment, a ring network is provided. The ring network includes a number of network elements, each including first and second switch fabrics. At least two uni-directional busses are coupled between the first and second switch fabrics. A number of ring segments are coupled between adjacent network elements to form first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route. The first and second switch fabrics of each network element are associated with one of the first and second routes. The first and second switch fabrics of each network element separately track the status of a number of virtual connections such that when an error is detected by one of the switch fabrics associated with a working route for a virtual connection, the switch fabric detecting the error communicates the change in state for the virtual connection to the other switch fabric over one of the first and second uni-directional busses to be used in a switching decision.
In other embodiments, circuits and methods are provided that selectively disable protection switching on specified conditions, that revert back to working routes after a protection switch when conditions improve, and that communicate a refused protection switch to a processor associated with switch fabrics involved in an attempted protection switch.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a block diagram of a virtual connection ring network constructed according to the teachings of the present invention.
FIG. 2 is a block diagram of a ring interface module for a network element in a virtual connection ring network according to the teachings of the present invention.
FIG. 3 is a block diagram of an access interface module for a network element in a virtual connection ring network according to the teachings of the present invention.
FIG. 4 is a flow chart of an embodiment of a process for protection switching according to the teachings of the present invention.



DETAILED DESCRIPTION
In the following detailed description of the preferred embodiments, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration specific illustrative embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention, and it is to be understood that other embodiments may be utilized and that logical, mechanical and electrical changes may be made without departing from the spirit and scope of the present invention. The following detailed description is, therefore, not to be taken in a limiting sense.
FIG. 1 is a block diagram of an illustrative embodiment of the present invention. Network 100 is a closed-loop, ring network including network elements NE1 through NEN. Network 100 transmits packets between endpoints, e.g., terminals, over virtual connections using, for example, asynchronous transfer mode (ATM), frame relay, or any other appropriate virtual connection protocol. Network elements NE1 through NEN may comprise, for example, virtual connection add/drop multiplexers that operate on the packets. In the embodiments, the network performs protection switching for the virtual connections at the ATM layer. This layer conventionally uses fixed length packets or cells. It is understood, however, that the embodiments of the present invention can transmit fixed or variable-length packets at the data link layer or higher protocol layers.
Network 100 comprises a number of “ring segments.” A ring segment is defined as a link that carries data packets or cells in a unidirectional path between two adjacent network elements. Each ring segment in FIG. 1 is denoted by the expression <first network element, second network element> wherein the first network element and the second network element are adjacent network elements in network 100 in the direction of traffic flow around the network. For example, the ring segment connecting network element NE1 to network element NE2 is denoted <1,2>.
Communication over network 100 is accomplished through virtual connections between “endpoints.” Each virtual connection begins with a “traffic originating endpoint” and terminates at a “traffic terminating endpoint.” The traffic originating endpoint adds traffic or data packets onto network 100 and the traffic terminating endpoint drops the traffic from network 100. There can be many traffic originating endpoints on each network element of ring network 100. It is also noted that each network element supports multiple traffic terminating endpoints.
Network 100 is configured with ring segments that form two routes for transmitting packets or data cells around the ring between endpoints. Advantageously, each virtual connection transmits cells between endpoints on both routes around the ring. In one embodiment, the network elements are configured to transmit cells in opposite directions around the ring. By transmitting cells on both routes, network 100 can carry traffic even when there is an error in one of the routes.
To avoid confusion at the traffic terminating endpoint, one route is the “working route” and the other route is the “protection route” for the virtual connection between the endpoints. Normally, a traffic terminating endpoint receives the packets that are transmitted over the working route for the virtual connection. When an error that affects the working route for a virtual connection occurs, the appropriate network element switches the virtual connection to the protection route and provides data packets from the protection route to the traffic terminating endpoint for the virtual connection. It is noted that during normal operation in this embodiment, traffic is bridged to both the working route and the protection route. This allows a network element associated with the terminating endpoint to perform a protection switch without communicating this to the network element associated with the originating endpoint.
In operation, network 100 switches between working and protection routes for virtual connection “A” when an error is detected in the working route. It is noted that virtual connection A is a bi-directional connection even though only one direction of the virtual connection is shown and described here. In the direction shown, virtual connection A of FIG. 1 originates at network element NE1 and terminates at network element NE4. In this example, assume that the clockwise route is designated as the working route. Virtual connection A places cells on both routes. Network element NE1 transmits cells on ring segment <1,N> of the protection route to network element NEN. These cells continue around network 100 and terminate at network element NE4. Virtual connection A also transmits the same cells on the working route to network element NE2 on ring segment <1,2>. These cells continue clockwise around network 100 and terminate at network element NE4.
At some point during transmission of cells for virtual connection A, an error, e.g., due to a cut cable in ring segment <2,3>, is detected by network element NE3. Network element NE3 identifies the virtual connections, including virtual connection A, that are affected by the error. Typically, these are the connections that are “continued”/“passed through” or “dropped” at network element NE3. Network element NE3 generates and transmits cells, referred to as “error cells,” downstream or locally (within this network element) in these virtual connections on the affected route. In this example, the error cells for virtual connection A are initially transmitted on ring segment <3,4> of the clockwise, working route. Network element NE4 receives the error cells on the working route for virtual connection A. Network element NE4 then switches to the protection route for virtual connection A. Thus, communication is maintained for virtual connection A despite the error in the working route.
FIG. 2 is a block diagram of a ring interface module, indicated generally at 200, that is constructed according to the teachings of the present invention. Ring interface module 200 is used, for example, in a network element in a ring network of the type shown and described with respect to FIG. 1, above, to interface with one of the routes of the ring network.
Among other functions, ring interface module 200 generates error cells when an error is detected in the route of the network. Ring interface module 200 includes physical layer device 202 that is coupled to receive a transmission stream from a ring segment of the ring network. Further, physical layer device 202 is also coupled to output a transmission stream to another ring segment of the ring network. Thus, physical layer device 202 interfaces the network element with the ring network at the physical layer. For purposes of this specification, a physical layer device interfaces a transmission stream between a line and a cell-based protocol. The physical layer device has two sides. On one side, the physical layer device processes a physical layer, or part thereof, on a transmission stream leading to a line (wire or fiber). On the other side, the physical layer device presents a cell-based protocol to another entity/device which performs processing on the same stream—without the physical layer header—but at the higher layer, e.g., ATM layer. The physical layer device can work in the receive direction (line-to-cell), the transmit direction (cell-to-line), or both.
Ring interface module 200 also includes switch fabric 204. Switch fabric 204 is coupled to physical layer device 202—it interfaces the network element with the ring network at the data link or ATM layer. Switch fabric 204 is used to convey packets from the ring either back to the ring (“pass through” or “continue” the packets) or to endpoints associated with the network element (“dropped packets”). Switch fabric 204 also receives packets from endpoints associated with the network element. These packets are received from an access interface module, for example, of the type described below with respect to FIG. 3.
Switch fabric 204 includes a routing table. The routing table is used to route cells that are received by switch fabric 204 based on the virtual path identifier in the cell's header. For a cell received from the ring, the basic routing choices are: continue the cell by routing the cell back out onto the ring or dropping the cell by passing the cell out of the ring interface module to the switching equipment of the access interface module. Additionally, switch fabric 204 passes cells received from the access interface module out onto the ring through physical layer device 202.
Ring interface module 200 also includes microprocessor 206. Microprocessor 206 is coupled to provide control signals to physical layer device 202 and switch fabric 204.
In operation, microprocessor 206 executes instructions to cause ring interface module 200 to generate error cells when physical layer device 202 detects and reports an error to microprocessor 206. The error cells alert downstream network elements to the error and allow these network elements to determine when to switch from a working route to a protection route for a particular virtual connection.
Physical layer device 202 can detect many kinds of errors. For example, physical layer device 202 can detect a signal failure in the ring segment coupled to the input of physical layer device 202 due to, for example, a cut or damaged fiber optic cable. Further, physical layer device 202 can detect and report other errors that may be used to determine whether a particular virtual connection needs to switch from a working route to a protection route. Such other errors include but are not limited to signal degradation on the ring segment that is coupled to the input of physical layer device 202. It is noted that the error cells can be configured with one or more bits to include information concerning the type of error detected.
When an error is detected, microprocessor 206 generates a control signal for switch fabric 204. The control signal configures an error cell generator 205 of switch fabric 204 to generate error cells for a specified set of the virtual connections supported by the ring network. In one embodiment, microprocessor 206 identifies the set of virtual connections by looking in a table. For example, microprocessor 206 can generate a control signal that instructs switch fabric 204 to generate error cells for each virtual connection that is continued by the ring interface module 200, i.e., the ring interface module receives cells from the ring and transmits the same cells back out onto the ring for transmission to a downstream network element. Alternatively, microprocessor 206 can generate a control signal that instructs the switch fabric to generate error cells for each virtual connection that is added to the ring network by ring interface module 200. Further, microprocessor 206 can instruct the switch fabric to generate error cells for some combination of virtual connections that are continued or added by ring interface module 200.
Advantageously, a single-byte write operation by microprocessor 206 can be used to specify the set of virtual connections in the cases, such as, when the subset is “all continued connections,” “all added connections” or “all dropped connections.” Based on this single-byte, switch fabric 204 generates and transmits error cells for each virtual connection in the subset.
Ring interface module 200 also accounts for arbitration between error cells and cells that carry traffic between endpoints. When an error is detected, a large number of virtual connections could be affected. Thus, switch fabric 204 could be called on to process a large burst of error cells. These error cells could interfere with normal cells that arrive at the switch fabric. In order to avoid delay in the flow of normal traffic, switch fabric 204 arbitrates between error cells for one set of virtual connections, e.g., all continuing virtual connections, and valid traffic on the remaining virtual connections, e.g., all added virtual connections. In one embodiment, switch fabric 204 arbitrates between error cells and normal cells in the same manner as for normal, fault-free operation between valid traffic for one set of virtual connections and valid traffic for other sets.
Ring interface module 200 can also notify the local access interface modules (those access interface modules in the same network element as ring interface module 200) of errors detected by physical layer device 202. First, microprocessor 206 sends signals to switch fabric 204 to generate error cells for all dropped connections. Alternatively, microprocessor 206 causes switch fabric 204 to indicate a “Ring Fault” over the bus of the network element that is associated with ring interface module 200. The response of an access module to these events is described below with respect to FIG. 3.
FIG. 3 is a block diagram of an access interface module, indicated generally at 300, and constructed according to the teachings of the present invention. Access interface module 300 is used, for example, in a network element in a ring network of the type shown and described with respect to FIG. 1, above. Among other functions, access interface module 300 determines when to switch from a working route to a protection route for a particular virtual connection when error cells are detected on the working route for the virtual connection. Access interface module 300 includes first and second switch fabrics, 304 and 306, respectively. Switch fabrics 304 and 306 are coupled to ring interface modules that are associated with different routes of a ring network. Thus, first switch fabric 304 receives and transmits cells on a first route of the ring network and second switch fabric 306 receives and transmits cells on a second route of the ring network.
First and second switch fabrics 304 and 306 are coupled to access device 302. Access device 302 may comprise, an ATM device, Frame Relay device or physical layer device. An output of access device 302 is coupled to inputs of both first and second switch fabrics 304 and 306. Further, an input of access device 302 is coupled to outputs of both first and second switch fabrics 304 and 306. Microprocessor 308 is coupled to provide control signals to access device 302 and first and second switch fabrics 304 and 306. Switch fabrics 304 and 306 each include a status table that tracks the status of the virtual connections. This table is used to decide when to switch from a working route to a protection route for a particular virtual connection. For purposes of clarity, conventional circuits needed to complete access interface module 300 and ring interface module 200 are not shown. However, such additional details are within the knowledge of a person of ordinary skill in the art.
In operation, access interface module 300 transmits traffic between the ring network and endpoints associated with the network elements. In one direction, the “ingress direction,” access interface module 300 transmits traffic from the endpoints onto both routes of the ring network. This is referred to as “1+1 operation.” For a given virtual connection, one route is designated as the working route and the other route is the protection route. All cells received by access device 302 from the endpoints associated with access interface module 300 are provided to both first and second switch fabrics 304 and 306. Switch fabrics 304 and 306 transmit the cells onto both routes of the ring network.
In the other direction, the “egress direction,” access interface module 300 processes traffic coming from both routes of the ring to be transmitted to the endpoints associated with the access interface module. Traffic from one of the routes of the ring network is provided, through a ring interface module, to first switch fabric 304 and traffic from the other route is coupled, through another ring interface module, to second switch fabric 306. Microprocessor 308 generates control signals for first and second switching fabrics 304 and 306 that select which switch fabric is used as the working route for a particular virtual connection. When a virtual connection is set-up and there are no error conditions with either route of the ring network, either route may be selected as the working route. The choice may depend on, for example, the different transmission distances around the ring or other appropriate factors.
When an error cell is detected on a working route for a virtual connection, the switch fabric for the working route interrupts microprocessor 308. Microprocessor 308 reads the status table in the switch fabric to determine the virtual connection that received the error cell. In one embodiment, microprocessor 308 reads the status table one byte at a time with each bit in the byte corresponding to a state of a designated virtual connection of the ring network. For example, the status table of the switch fabric contains one bit per virtual connection. Initially, all bits are set to “0,” indicating that no errors have been detected on the route for the virtual connection. When an error is detected, the bit corresponding to the virtual connection is set to “1,” and this bit is set back to “0” when a valid user data cell—as opposed to an error cell—is received for that virtual connection.
In other embodiments, the network element may extract more information about the error from the error cells. For example, if multiple bits are used to indicate one or a number of states, these bits may be extracted from each error cell and stored in the status table for each virtual connection so as to indicate different kinds of errors, e.g., signal failure, signal degradation. In other embodiments, microprocessor 308 may extract information from less than all of the processed error cells to determine the nature of the error for purposes other than protection switching. Thus, the information concerning the nature of the error can be extracted from one or more of the error cells received at a downstream network element.
If the error cell corresponds to a virtual connection that uses this route as the working route, microprocessor 308 instructs switch fabrics 304 and 306 to switch such that the protection route becomes the working route for the virtual connection. Advantageously, by using a status table to hold the state information for the virtual connections, access interface module 300 is able to hold the states of the virtual connections without losing information due to queue overflow as would happen if a typically sized operations, administration and maintenance (OAM) cell queue approach were used.
Alternatively, in one embodiment, switch fabrics 304 and 306 directly exchange state-transition information for virtual connections, without the need for microprocessor 308 to read status tables and instruct switch fabrics 304 and 306 to change their working/protection routes. In this embodiment, upon detecting a state-deterioration transition for a virtual connection—e.g., changing the state for a virtual connection from a ‘0’ (error-free) to some non-zero value (errored)—the switch fabric detecting the transition passes the virtual connection identifier along with the new state to the other switch fabric. For example, if a state-deteriorization is detected by switch fabric 304, switch fabric 304 passes the virtual connection identifier A along with the new state to switch fabric 306. If the state of virtual connection A as stored in switch fabric 306 is better than the state of virtual connection A conveyed by switch fabric 304 in its request to switch fabric 306, in the next cell cycle switch fabric 306 responds directly to switch fabric 304 with a grant, in which case in the cell cycle following the grant switch fabric 306 changes its configuration to be the working device for virtual connection A in the egress direction and switch fabric 304 changes its configuration to be the protection device for virtual connection A in the egress direction. Advantageously, this is all done without the involvement of microprocessor 308, thus expediting the switch over procedure. Microprocessor 308 is still notified of the switch over, and can still read the switch fabric status tables.
If the state of virtual connection A as stored in switch fabric 306 is equal to or worse than the state of virtual connection A conveyed by switch fabric 304 in its request to switch fabric 306, in the next cell cycle switch fabric 306 responds directly to switch fabric 304 with a “no grant” message, in which case neither switch fabric changes its working/protection configurations for virtual connection A. Microprocessor 308 is still notified of the state-deterioration transition of virtual connection A as detected by switch fabric 304, and can still read status tables of switch fabrics 304 and 306. Further, microprocessor 308 is notified of the no grant message by, for example, an interrupt. Advantageously, when microprocessor 308 is notified of a denial of a switch over by one of first and second switch fabrics 304 and 306, microprocessor 308 knows that both paths are failing. Thus, cells can be generated indicating the failure of both ring directions.
As described above with respect to FIG. 2, the ring interface module can notify a local access interface module of a detected error. When the local access interface module is notified of an error by error cells on a virtual connection, the access interface module uses the protection switching techniques described above to switch, when necessary, for a particular virtual connection. When the access interface module is notified of the error over a bus of the network element, the detecting switch fabric interrupts the microprocessor, which sets globally the other switch fabric as the working switch fabric (for all virtual connections for this access interface module). This is only for the egress direction. On the ingress side, traffic is still placed onto both routes of the ring. Further, a single byte override of the per-virtual connection routing table is provided to expedite switch over in this case.
In one embodiment, microprocessor 308 is programmed to selectively disable switch fabrics 304 and 306 from switching between working and protection states. For example, microprocessor 308 selectively disables protection switching virtual connections due to a fault on the ring interface module and signal degradation but allows protection switching to continue for virtual connections due to failure conditions. In addition, switch fabrics 304 and 306 still continue to track the states of the virtual connections.
In one embodiment, first and second switch fabrics 304 and 306 exchange information over two unidirectional links 310. Advantageously, the use of two uni-directional links between first and second switch fabrics 304 and 306 allows faster processing of protection switching requests by allowing both switch fabrics simultaneous access to the other switch fabric. For example, first switch fabric 304 can request a protection switch for a first virtual channel using one of the two uni-directional links 310 contemporaneously with a request on the second of the two uni-directional links 310 from second switch fabric 306 for a protection switch for a second virtual channel.
Alternatively, in one embodiment switch fabrics 304 and 306 directly exchange global state-transition information and instructions for egress processing for all virtual connections for this access interface module, without the need for microprocessor 308 to set one switch fabric to globally be the working switch fabric for all virtual connections for this access interface module in the egress direction and the other switch fabric to globally be the protection switch fabric for all virtual connections for this access interface module in the egress direction.
In this embodiment, upon detecting a “Ring Fault” indication over a bus of the network element, the switch fabric that detects the indication passes this information to the other switch fabric. For example, when switch fabric 304 detects a Ring Fault, switch fabric 304 passes this information to switch fabric 306. If switch fabric 306 is not detecting a “Ring Fault” indication on its bus and it is not configured to globally be either the working switch fabric or the protection switch fabric for all virtual connections for this access interface module, in the next cell cycle switch fabric 306 responds directly to switch fabric 304 with a global grant for the egress direction. In the cell cycle after the global grant switch fabric 306 configures itself to globally be the working switch fabric for all virtual connections for this access interface module in the egress direction. Contemporaneously, switch fabric 304 configures itself to globally be the protection switch fabric for all virtual connections for this access interface module in the egress direction. On the ingress side, traffic is still placed onto both routes of the ring.
Advantageously, this is all done without the involvement of microprocessor 308, thus expediting the switch over procedure. Microprocessor 308 is still notified of the switch over.
If switch fabric 306 is detecting a “Ring Fault” indication on its bus or it is configured by microprocessor 308 to globally be either the working switch fabric or the protection switch fabric for all virtual connections for this access interface module in the egress direction, in the next cell cycle switch fabric 306 responds directly to switch fabric 304 with a “no grant” message, in which case neither switch fabric 304 nor switch fabric 306 changes its global working/protection configurations. Microprocessor 308 is still notified of the detection of the “Ring Fault” indication by switch fabric 304.
In one embodiment, microprocessor 308 selectively switches back to use the switch fabric associated with the original working route, either globally or on a per virtual connection basis, when conditions improve sufficiently on the original working route. This is referred to as “revertive switching.” FIG. 4 is a flow chart that illustrates an embodiment of a process for implementing revertive switching according to the teachings of the present invention.
The process begins at block 400. At block 402, the method performs a protection switch at a ring interface module. For example, the protection switch is accomplished on a per virtual connection as described above. Alternatively, the protection switch is accomplished on a global basis due to, for example, a ring fault. At block 404, the method determines whether the condition that caused the protection switch has changed. For example, the method determines whether the virtual connection on the original working route associated with the protection switch has returned to a normal, “clear” condition. Alternatively, the method determines whether a ring fault has been corrected. If the cause of the protection switch has not been fixed, the method returns to block 404.
When the source of the protection switch has been fixed, the method proceeds to block 408 and switches back to the original, working route, e.g, switches from first switch fabric 304 to second switch fabric 306 for one or more selected virtual connections. The method ends at block 410.
CONCLUSION
Although specific embodiments have been illustrated and described herein, it will be appreciated by those of ordinary skill in the art that any arrangement which is calculated to achieve the same purpose may be substituted for the specific embodiment shown. This application is intended to cover any adaptations or variations of the present invention. For example, the present invention is not limited to applications using asynchronous transfer mode. Other virtual circuit protocols can be used. Further, the size and arrangement of the table that tracks the status of the virtual connections can be adjusted to meet the requirements of a specific application. Further, a multiple-byte signal can be used to identify the set of virtual connections affected by an error.

## Claims

1. A ring network, comprising:
a number of network elements, each including first and second switch fabrics;
at least two uni-directional busses coupled between the first and second switch fabrics;
a number of ring segments coupled between adjacent network elements to form first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route;
wherein the first and second switch fabrics of each network element are associated with one of the first and second routes; and
wherein the first and second switch fabrics of each network element separately track the status of a number of virtual connections such that when an error is detected by one of the switch fabrics associated with a working route for a virtual connection, the switch fabric detecting the error communicates the change in state for the virtual connection to the other switch fabric over one of the first and second uni-directional busses to be used in a switching decision.

2. The ring network of claim 1, wherein the network elements each include two ring interface modules having:
a microprocessor;
a physical layer device that detects errors on a route of the ring network and communicates the errors to the microprocessor; and
a switch fabric, responsive to the microprocessor, that generates error cells for transmission to downstream network elements and this network element on affected virtual connections that use the route.

3. The ring network of claim 2, wherein the microprocessor executes instructions to identify a set of virtual connections that are affected by a detected error and to instruct the switch fabric to generate error cells for each of the virtual connections in the set.

4. The ring network of claim 2, wherein the switch fabric includes an error cell generator that generates error cells that include at least one bit to indicate one of a number of possible states of one of the first and second routes.

5. The ring network of claim 1, wherein the first and second switch fabrics and the at least two uni-directional busses are incorporated in an access interface module and wherein the first and second switch fabrics each include a table that tracks the state of a number of virtual connections.

6. The ring network of claim 5, wherein the first and second switch fabrics each include a table that tracks the state of each virtual connection based on error cells and data cells received on the virtual connections.

7. A network element for a ring network having first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route, the network element comprising:
a first ring interface module that is coupled to the first route,
a second ring interface module that is coupled to the second route;
an access interface module having first and second switch fabrics that are coupled to the first and second interface modules, respectively;
first and second uni-directional busses that provide a communication path between the first and second switch fabrics;
wherein the ring interface modules generate error cells when an error is detected on the route associated with the ring interface module that affects one or more of the virtual connections transmitted on the route; and
wherein the first and second switch fabrics of the access interface module track the state of the virtual connections such that when an error cell is received by a switch fabric that is associated with a working route for a virtual connection, the switch fabric communicates the change in state of the virtual connection to the other switch fabric over one of the first and second uni-directional busses to be used in making a switching decision.

8. The network element of claim 7, wherein the two ring interface modules each include:
a microprocessor;
a physical layer device that detects errors on a route of the ring network and communicates the errors to the microprocessor; and
a switch fabric, responsive to the microprocessor, that generates error cells for transmission to downstream network elements and this network element on affected virtual connections that use the route.

9. The network element of claim 8, wherein the microprocessor executes instructions to identify a set of virtual connections that are affected by a detected error and to instruct the switch fabric to generate error cells for each of the virtual connections in the set.

10. The network element of claim 8, wherein the switch fabric includes an error cell generator that generates error cells that include at least one bit to indicate one of a number of possible states of one of the first and second routes.

11. The network element of claim 7, wherein the first and second switch fabrics each include a table that tracks the state of a number of virtual connections.

12. The network element of claim 11, wherein the first and second switch fabrics each include a table that tracks the state of each virtual connection based on error cells and data cells received on the virtual connections.

13. A network element for a ring network having first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route, the network element comprising:
a first ring interface module that is coupled to the first route;
a second ring interface module that is coupled to the second route;
an access interface module having first and second switch fabrics that are coupled to the first and second interface modules, respectively;
first and second unidirectional busses that provide a communication path between the first and second switch fabrics;
wherein the first and second switch fabrics of the access interface module track the state of the virtual connections such that when a change in state of a virtual connection is detected by one of the first and second switch fabrics, the one switch fabric communicates the detected change to the other switch fabric over one of the first and second unidirectional busses to be used in making a switching decision.

14. A method for protection switching in a ring network having first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route, the method comprising:
detecting an error in one of the first and second routes (the “errored route”);
generating error cells for each virtual connection that is affected by the detected error;
injecting the error cells to be transmitted downstream on the errored route;
receiving the error cells at a first switch fabric at a downstream network element associated with the errored route;
communicating the change in state of the errored route to a second switch fabric of the downstream network element associated with the other of the first and second routes (the “other route”);
determining whether the state of the other route is acceptable for a protection switch;
when the state of the other route is acceptable, and the other route is configured as the protection route for a virtual connection, automatically configuring the second switch fabric to establish the other route to be the working route for the virtual connection;
when the state of the other route is not acceptable, and the other route is configured as the protection route for a virtual connection, responding to the first switch fabric with a message that the protection switch is denied; and
notifying a processor associated with the first and second switch fabrics that the protection switch was denied.

15. The method of claim 14, wherein generating error cells comprises:
identifying a set of virtual connections that are affected by the detected error; and
generating an error cell for each virtual connection in the set.

16. The method of claim 15, wherein identifying a set of virtual connections comprises identifying virtual connections that are continued by a network element that detects the error.

17. The method of claim 15, wherein identifying a set of virtual connections comprises looking in a table of a network element that detected the error to determine a set of virtual connections that are affected by the detected error.

18. The method of claim 14, wherein generating error cells comprises:
identifying a set of virtual connections that are affected by the detected error;
generating a code signal that corresponds to the set of virtual connections;
passing the code signal to a switch fabric of a network element that detected the error; and
generating an error cell for each virtual connection based on the code signal.

19. The method of claim 14, and further comprising arbitrating contention between error cells and cells that carry traffic between endpoints.

20. The method of claim 14, and further comprising extracting information from at least one error cell at the downstream network element that received the error cell to determine the nature of the error.

21. The method of claim 14, wherein generating error cells comprises generating error cells that include at least one bit to indicate one of a number of possible states of the errored route.

22. The method of claim 14, and further comprising tracking a state of the first and second routes for each virtual connection by updating a table at the downstream network element.

23. The method of claim 14, wherein detecting an error comprises detecting a loss of signal.

24. The method of claim 14, wherein detecting an error comprises detecting degradation in signals transmitted along a route of the ring network.

25. A method for protection switching in a ring network having first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route, the method comprising:
monitoring the first and second routes for changes in at least one selected condition at first and second switch fabrics of a network element;
communicating a change in state of one of the first and second routes (the “changed route”) detected by one of the first and second switch fabrics to the other of the first and second switch fabrics associated with the other of the first and second routes (the “other route”);
determining whether the state of the other route is acceptable for a protection switch;
when the state of the other route is acceptable, and the other route is configured as the protection route for a virtual connection, automatically configuring the other of the first and second switch fabrics to establish the other route to be the working route for the virtual connection;
when the state of the other route is not acceptable, and the other route is configured as the protection route for a virtual connection, responding to the one of the first and second switch fabrics with a message that the protection switch is denied; and
notifying a processor associated with the first and second switch fabrics that the protection switch was denied.

26. The method of claim 25, wherein monitoring the first and second routes for changes in at least one selected condition comprises monitoring the first and second routes for at least one of signal failure, signal degradation and ring fault.

27. The method of claim 25, wherein communicating a change in state comprises communicating a change in state over a uni-directional bus.

28. The method of claim 25, wherein determining whether the state of the other route is acceptable for a protection switch comprises determining whether the state of the other route is qualitatively better than the state of the changed route.

29. A method for protection switching in a ring network having first and second routes for transporting cells using virtual connections wherein, for each virtual connection, one route is the working route and the other route is the protection route, the method comprising:
detecting an error in one of the first and second routes (the “errored route”);
generating error cells for each virtual connection that is affected by the detected error;
injecting the error cells to be transmitted downstream on the errored route;
receiving the error cells at a first switch fabric at a downstream network element associated with the errored route;
communicating the change in state of the errored route to a second switch fabric of the downstream network element associated with the other of the first and second routes (the “other route”);
determining whether the state of the other route is acceptable for a protection switch;
when the state of the other route is acceptable, and the other route is configured as the protection route for a virtual connection, automatically configuring the second switch fabric to establish the other route to be the working route for the virtual connection; and
when the errored route returns to an acceptable condition, configuring the first switch fabric to establish the errored route as the working route for the virtual connection.

30. The method of claim 29, wherein injecting error cells comprises injecting cells that indicate a condition of the virtual connection.