Abstract
An Ethernet Metropolitan Area Network provides connectivity to one or more customer premises to packet-bases services, such as ATM, Frame Relay, or IP while advantageously providing a mechanism for assuring security and regulation of customer traffic. Upon receipt of each customer-generated information frame, an ingress Multi-Service Platform (MSP) tags the frame with a customer descriptor that specifically identifies the recipient customer. In practice, the MSP tags each frame by overwriting the Virtual Local Area Network (VLAN) identifier with the routing descriptor. Using the customer descriptor in each frame, a recipient Provider Edge Router (PER) or ATM switch can map the information as appropriate to direct the information to the specific customer. In addition, the customer descriptor may also include Quality of Service (QoS) allowing the recipient Provider Edge Router (PER) or ATM switch to vary the QoS level accordingly.
Claims
1. A method for processing a frame having a field defining a quality of service, the method comprising: receiving the frame at a first device; processing the frame to determine a quality of service level associated with a service level agreement to apply to the frame based on the field defining the quality of service in the frame, wherein the field defining the quality of service in the frame further comprises information pertaining to an egress port of a second device that is sending the frame, wherein the field is carried as a shim header in a data field of the frame; and delivering the frame to a destination using the quality of service level that is determined.
2. The method of claim 1, wherein the frame carries at least one of: voice information or data information.
3. The method of claim 2, wherein the quality of service level is selected in accordance with whether the frame is carrying the voice information or the data information.
4. The method of claim 1, wherein the delivering the frame to the destination comprises mapping the frame to an identifier corresponding to the destination.
5. The method of claim 4, wherein the identifier comprises a virtual private network identifier.
6. The method of claim 5, wherein the destination comprises a virtual private network.
7. The method of claim 6, wherein the virtual private network comprises an intranet virtual private network.
8. The method of claim 4, wherein the destination comprises a permanent virtual circuit.
9. The method of claim 4, wherein the destination comprises a multi-protocol label switching tunnel.
10. The method of claim 1, wherein the first device comprises a provider edge router.
11. The method of claim 1, wherein the destination comprises a voice network.
12. The method of claim 1, wherein the destination comprises the Internet.
13. The method of claim 1, wherein the second device is a central office multi-service platform.
14. The method of claim 13, wherein the central office multi-service platform is deployed in a metropolitan area network.
15. The method of claim 14, wherein the metropolitan area network is an Ethernet-based metropolitan area network.
16. The method of claim 15, wherein the frame comprises an Ethernet frame.
17. The method of claim 1, wherein the first device comprises an asynchronous transfer mode device.
18. An apparatus for processing a frame having a field defining a quality of service, comprising: a router for: receiving the frame; processing the frame to determine a quality of service level associated with a service level agreement to apply to the frame based on the field defining the quality of service in the frame, wherein the field defining the quality of service in the frame further comprises information pertaining to an egress port of a device that is sending the frame, wherein the field is carried as a shim header in a data field of the frame; and delivering the frame to a destination using the quality of service level that is determined.
19. The apparatus of claim 18, wherein the frame carries at least one of: voice information or data information.
20. The apparatus of claim 19, wherein the quality of service level is selected in accordance with whether the frame is carrying the voice information or the data information.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
[0011] FIG. 1 depicts an Ethernet Protocol Metropolitan Area Network (MAN) in which each frame is tagged with a customer descriptor in its VLAN field in accordance with the present principles;
[0012] FIG. 2 illustrates a sample frame for transmission over the network of FIG. 1;
[0013] FIG. 3 illustrates a portion of the MAN showing the various stages in the tagging process;
[0014] FIG. 4 illustrates a portion of a MAN showing the use of the priority bits within the VLAN field to establish different quality of service levels;
[0015] FIG. 5 illustrates a portion of a MAN showing the manner in which frames are mapped to different Permanent Virtual Circuits by an ATM switch;
[0016] FIG. 6 illustrates a portion of a MAN showing the manner in which frames are mapped into different Multi-Protocol Label Switching (MPLS) tunnels;
[0017] FIG. 7 illustrates a portion of a MAN showing the manner in which frames are mapped into different service networks;
[0018] FIG. 8 illustrates a portion of a prior art Ethernet protocol network in which the VLAN on an incoming frame received at an ingress port of a switch extends directly to frame output by the switch at an egress port; and
[0019] FIG. 9 illustrates a portion of an alternate preferred embodiment of the invention in which a VLAN tag on a frame received at an ingress port of a switch is mapped to a second tag that is unique to an egress port of the switch which outputs the frame.
DETAILED DESCRIPTION
[0020] FIG. 1 depicts an Ethernet Protocol Metropolitan Area Network (MAN) 10 comprised of a plurality of Multi-Service Platforms (MSPs) 12.sub.1-12.sub.n where n is an integer, each MSP taking the form of an Ethernet switch or the like. In the illustrated embodiment n=4, although the network 10 could include a smaller or larger number of MSPs. A fiber ring or SONET ring infrastructure 14 connects the platforms 12.sub.1-12.sub.4 in daisy-chain fashion allowing each MSP to statistically multiplex information onto, and to statistically de-multiplex information off the ring infrastructure 14.
[0021] Each of MSPs 12.sub.1-12.sub.3 serves at least one, and in some instances, a plurality of premises 16 belonging to one or more customers. In the illustrated embodiment of FIG. 1, the MSP 12.sub.1 serves a single customer premises 16.sub.1 belonging to customer 1 whereas, the MSP 12.sub.2 serves premises 16.sub.2, and 16.sub.3 belonging to customers 2 and 3, respectively. The MSP 12.sub.3 serves a single premises 16.sub.4 that belongs to customer 3. The MSPs 12.sub.1-12.sub.3 are linked to their corresponding premises via 10, 100 or 1000 MB links 19. The MSP 12.sub.4 bears the legend CO MSP because it serves as a central office to route traffic from the MAN 10 to a Provider Edge Router (PER) 18 for delivery to other networks, such as Frame Relay, ATM, MPLS networks or the Internet as discussed hereinafter. By the same token, the PER 18 can route traffic from such other networks onto the MAN 10 via the CO MSP 124.
[0022] The traffic routed onto and off of the MAN 10 by each MSP takes the form of one or more frames 20 depicted in FIG. 2. Heretofore, traffic routed onto the MAN 10 from a particular customer's premises was combined with other customers' traffic with no logical separation, thus raising security concerns. Moreover, since all customers' traffic share the same bandwidth, difficulties existed in prior art Ethernet MANs in regulating the traffic from each customer's premises, and in affording different customers different Quality of Service (QoS) levels in accordance with individual Service Level Agreements.
[0023] These difficulties are overcome in accordance with the present principles by tagging each frame 20 routed onto the MAN 10 at a particular MSP, say MSP 12.sub.3, with a customer descriptor 22 (best seen in FIG. 2) that identifies the customer sending that frame. As discussed in greater detail below, each MSP receiving a frame 20 on the fiber ring infrastructure 14 uses the customer descriptor 22 in that frame to maintain distinct routing and addressing tables that are assigned to each customer served by that MSP. This permits each customer to use its own addressing plan without fear of overlap with other customers, as the customers are all maintained as logically separate.
[0024] FIG. 2 depicts the structure of an exemplary Ethernet protocol frame 20 specified by Ethernet Standard 802.1Q. Among the blocks of bytes within each frame 20 is a Virtual Local Area Network (VLAN) Identifier 22 comprised of sixteen bits. In practice, the VLAN identifier 22, in conjunction with a VLAN flag 23 within the frame, facilitates routing of the frame within a customer's premises to a particular VLAN. However, the VLAN identifier 22 has no influence on routing of the frame 20 after receipt at a MSP.
[0025] In accordance with the present principles, the prior disadvantages associated with conventional Ethernet networks, namely the lack of security and inability to regulate QoS levels, are overcome by overwriting the VLAN identifier 22 in each frame 20 with the customer descriptor maintained by the service provider. Overwriting the VLAN identifier 22 of FIG. 2 of each frame 20 with the customer descriptor 22 serves to tag that frame with the identity of its sending customer, thus affording each MSP in the MAN 10 the ability to route those frames only among the premises belonging to that same sending customer. Such tagging affords the operator of the MAN 10 the ability to provide security in connection with frames transmitted across the network, since frames with. customer ID A would not be delivered to any premises of customer with ID B. As an example, two or more customers served by a single MSP may use overlapping IP addressing schemes. In the absence of any, other identifier, the MSP receiving frames with overlapping IP addresses lacks the ability to assure accurate delivery.
[0026] In the illustrated embodiment depicted in FIG. 2, each MSP of FIG. 1 tags each outgoing frame 20 by overwriting the VLAN identifier 22 with the customer descriptor 22. However, tagging could occur in other ways, rather than overwriting the VLAN identifier 22. For example, the source address block 25 within the frame 20 could be overwritten with the customer descriptor 22. Alternatively, the data field 21 could include a shim header comprising the customer descriptor 22.
[0027] The tagging of each frame 20 with the customer descriptor 22 affords several distinct advantages in connection with routing of the frames through the MAN 10. First, as discussed above, the tagging affords each recipient MSP the ability to distinguish traffic destined for customers with overlapping address schemes, and thus allows for segregating traffic on the MAN 10. Further, tagging each frame 20 with the customer descriptor 22 enables mapping of the frames from a MAN 100 depicted in FIG. 3 to corresponding one of a plurality of customer Virtual Private Networks 26.sub.1-26.sub.3 within an MPLS network 28. As seen in FIG. 3, an MSP 1202 within the MAN 100 receives traffic from premises 160.sub.1, 160.sub.2, and 160.sub.3 belonging to customer 1, customer 2 and customer 3, respectively, which enjoy separate physical links to the MSP. Upon receipt of each frame from a particular customer, the MSP 120.sub.2 overwrites that frame with the customer descriptor 22 corresponding to the sending customer.
[0028] After tagging each frame, the MSP 120.sub.2 statistically multiplexes the frames onto the fiber ring infrastructure 14 for transmission to a CO MSP 1204 for receipt at a destination PER 180 that serves the MPLS network 28 within which are customer Virtual Private Networks 26.sub.1-26.sub.3. Using the customer descriptor 22 in each frame, the PER 180 maps the frame to the corresponding VPN identifier associated with a particular one of customer Virtual Private Networks 26.sub.1-26.sub.3 to properly route each frame to its intended destination.
[0029] The tagging scheme of the present invention also affords the ability to route frames with different QoS levels within a MAN 1000 depicted in FIG. 4. As seen in FIG. 4, an MSP 12002 within the MAN 1000 receives traffic from premises 1600.sub.2, and 1600.sub.3 belonging to customer 2 and customer 3, respectively, which enjoy separate physical links to the MSP, allowing each to send frames into the MAN. In the illustrated embodiment of FIG. 4, the frames originating from the premise 1600.sub.2 may contain either voice or data and have a corresponding QoS level associated with each type of frame. Upon receiving such frames, the MSP 1200.sub.2 overwrites the frame with the customer descriptor 22 corresponding to the particular customer sending the frame. The customer descriptor 22 will not only contain the identity of the sending customer, but the corresponding QoS level associated with that frame.
[0030] After tagging each frame, the MSP 1200.sub.2 statistically multiplexes the frames onto the fiber ring infrastructure 14 for transmission to a CO MSP 1200.sub.4 for receipt at a destination PER 1800 that serves an MPLS network 280 within which are customer Virtual Private Networks 2602 and 260.sub.3. Using the customer descriptor 22 in each frame, the PER 1800 of FIG. 4 maps the frame to the corresponding customer VPN to properly route each frame to its intended customer VPN. Further, the PER 1800 of FIG. 4 also maps the QoS level specified in the customer descriptor in the frame to assure that the appropriate quality of service level is applied to the particular frame.
[0031] In the above-described embodiments, the frames of customer traffic have been assumed to comprise IP packets that terminate on a router (i.e., Provider Edge Routers 18, 180 and 1800) and that the VPNs employ MPLS-BGP protocols. However, some customers may require multi-protocol support, or may otherwise require conventional PVCs so that the traffic streams must be mapped into Frame Relay or ATM PVCs as depicted in FIG. 5, which illustrates a portion of a MAN 10000 having a CO MSP 12000.sub.4 serving an ATM switch 30 that receives traffic from the MAN. As seen in FIG. 5, each of premises 16000.sub.1, 16000.sub.2 and 16000.sub.3 belonging to customer 1, customer 2 and customer 3, respectively, may send frames for receipt at MSP 120002 in the MAN 10000. The MSP 12000.sub.2 tags each frame with the corresponding customer descriptor prior to statistically multiplexing the data for transmission on the fiber ring infrastructure 14 to the CO MSP 12000.sub.4 for receipt at the ATM switch 30. The ATM switch 30 then maps each frame to the appropriate PVC in accordance with the customer descriptor 22 in the frame in a manner similar to the mapping described with respect to FIG. 3. Thus, the ATM switch 30 could map the frame to one of Frame Relay recipients' 32.sub.1, 32.sub.2, or 32.sub.3, ATM recipients 32.sub.4 or 32.sub.5 or IMA (Inverse Multiplexing over ATM) recipient 326.
[0032] FIG. 6 depicts a portion of a MAN network 100000 that routes frames onto separate MPLS tunnels 40.sub.1-40.sub.3 (each emulating a private line 32 in an MPLS network 28000) in accordance with the customer descriptor 22 written into each frame by a MSP 120000.sub.2 in the MAN. Each of customer premises 160000.sub.1, 160000.sub.2 and 160000.sub.3 depicted in FIG. 6 sends information frames for receipt at MSP 120000.sub.2. The MSP 120000.sub.2 tags each frame with the customer descriptor prior to statistically multiplexing the data for transmission on the fiber ring infrastructure 14 for delivery to a CO MSP 120000.sub.4 that serves a PER 18000. The PER 18000 translates (maps) the customer descriptors written onto the frames by the MSP 120000.sub.2 into the MPLS tunnels 40.sub.1-40.sub.3 to enable the PER to route the traffic to the intended customer.
[0033] FIG. 7 depicts a portion of a MAN network 1000000 for routing traffic (i.e., frames) onto separate networks in accordance with the customer descriptor written into each the frame by a MSP 120000.sub.2 in the MAN. Each of customer premises 1600000.sub.2 and 1600000.sub.3 depicted in FIG. 7 sends frames for receipt by the MSP 1200000.sub.2. The MSP 1200000.sub.2 tags each frame with the customer descriptor 22 prior to statistically multiplexing the data for transmission on the fiber ring infrastructure 14 for delivery to a CO MSP 1200000.sub.4 that serves a PER 180000. In accordance with the customer descriptor, the PER 1800000 of FIG. 7 routes traffic to a particular one of several different networks, e.g., an Intranet VPN 42.sub.1, a voice network 42.sub.2 and the Internet 42.sub.3, in accordance with the customer descriptor 22 written onto the frame by the MSP 1200000.sub.2.
[0034] Referring to FIG. 8, a prior art Ethernet switch 20000000 receives Ethernet frames at one of a plurality of input (ingress) ports, exemplified by ports 22000000, 24000000, and 26000000, from one a corresponding one of networks 28000000, 30000000 and 32000000, respectively. The frames are destined for an endpoint (not shown) served by a Wide Area Network (WAN) 36000000 linked to an egress port 40000000 of the switch 20000000 by an Ethernet trunk 38000000. Each Ethernet frame received at one of the ingress switch ports 22000000, 24000000, and 26000000 carries a tag, which in accordance with the IEEE 802.1Q Standard, identifies the Virtual Local Area Network (VLAN) that originated the frame. Thus, for example, a frame originated at network 32000000 associated with a VLAN having an Identification Designation (ID) of 5 will carry a tag with the corresponding VLAN ID. The VLAN address is twelve bits, offering the ability designate as many as 4096 separate VLANs.
[0035] A VLAN domain extends across any set of connected Ethernet switches, and therefore the address space of 4096 individual VLANs is shared across such an extended network of switches. In the past, the VLAN tag associated with an incoming Ethernet frame received at one of the ingress switch ports will extend directly to the egress switch port. Hence, the VLAN tag of an Ethernet frame received at the ingress port 26000000 extends directly to the egress port 40000000 on which the switch outputs the frame. The direct extension of the VLAN tag between the Ethernet switch ingress and egress ports increases the difficulty in the sharing and administration of the limited VLAN address space, as it now has to be coordinated across any connected group of Ethernet networks, even if they only are connected by termination on a common WAN access switch, as shown in FIG. 8. It also limits the size of a single switch in terms of VLAN capacity, being confined to 4096 VLANs on any given switch.
[0036] Referring to FIG. 9, in accordance with the present invention, the significance of the VLAN tag is localized to each physical port on the Ethernet switch 2000000, instead of being global to a network. At an ingress switch port, say port 22000000, the VLAN tag is still used to discriminate between different customer's traffic or services, but the switch 2000000 is free to re-write the tag to another value that is unique to the physical egress port 40000000. In other words, the switch 20000000 may terminate traffic from many independent networks, each using the full 4096 VLAN address space, and internally map the traffic using a unique tuple of (Physical port, VLAN ID) to the switch output ports (only one of which is shown). This dramatically increases the scale achievable with a single switch, which is, by virtue of the mapping of tags from an ingress to egress port is now limited only by 4096 VLAN IDs on each physical port, rather than a total 4096 VLANs as is the case of the prior network of FIG. 8.
[0037] The above-described embodiments merely illustrate the principles of the invention. Those skilled in the art may make various modifications and changes that will embody the principles of the invention and fall within the spirit and scope thereof.
