An apparatus and a method for transporting IP user traffic over a fiber optic ring network that includes a plurality of fiber optic ring network nodes. One ring is for conducting the user traffic on a working path and the other ring is for conducting the same user traffic on a protection path in the event of a failure in a communication link in the first ring on a protection path. A central node is coupled to a plurality of nodes to provide forwarding tables and updates to the nodes. As a result, IP traffic may be routed through the fiber optic ring network in a manner that provides fast switching from a working path to a protection path to minimize lost data packets whenever a communication link in the working path fails. Additionally, this capability is provided without requiring each node to have full IP routing capability. The forwarding tables for the protection and working paths provide for path routes and forwarding for the packets on a packet by packet basis. Accordingly, a ring may serve as both a working path and a protection path according to the origin and destination of the data packets traveling thereon. Additionally, the central node is adapted to generate multiple forwarding tables to accommodate packet by packet forwarding in a network created to support virtual private networks. The forwarding tables also are set up to support multicast transmissions of data packets.