In at least some embodiments, a network includes a plurality of switches and/or rou- ters configured to implement a native Ethernet routing protocol that encapsulates virtual private network (VPN) traffic with an encapsulation attachment point Ethernet source address, with a de-encapsulation attachment point Ethernet destination address, and with a service label that uni- quely identifies the VPN within the network. A single link state protocol such as IS-IS is used to carry network topology and service attachment point information.
展开▼