Tunnel protection groups can be configured for hard-pipe-based enterprise leased lines to protect the network against faults. On the network shown in Figure 1, master and backup tunnels are established using hard pipes between the PEs, forming a tunnel protection group. Hard-pipe-based PWs are established over the tunnel protection group. TP-OAM is deployed for the master tunnel. If the master tunnel link or a P fails, traffic can be quickly switched to the backup tunnel, implementing protection switching.