Patent ID: 7925766

Claim:
An internet service provider virtual private network comprising: a plurality of edge routers; a plurality of core routers for allowing communication between the plurality of edge routers; a virtual private network application in communication with the plurality of edge routers, the virtual private network application having a first internet protocol address; and a black-hole router in communication with the plurality of core routers, wherein virtual private network traffic received by the black-hole router is black-holed, the black-hole router for injecting a second internet protocol address into the internet service provider virtual private network, the second internet protocol address comprising: a same internet protocol address as the first internet protocol address; a higher preference value than the first internet protocol address; and a community value such that when the second internet protocol address is injected, a selected first number of edge routers of the plurality of edge routers directs virtual private network traffic addressed for the first internet protocol address to the virtual private network application and a selected second number of edge routers of the plurality of edge routers directs virtual private network traffic addressed for the second internet protocol address to the black-hole router.