A method for establishing protected connections includes determining a primary path to a first node through a first layer of a multi-layer network. The primary path comprises a plurality of first layer links. At least one link of the plurality of first layer links comprises at least one second layer link at a second layer. The method also includes determining a secondary path to the first node through the first layer. Upon detecting a first link of the plurality of first layer links is protected against link failure by the at least one second layer link the secondary path comprises the first link of the first layer. Additionally, upon detecting a second link of the plurality of first layer links is not protected against link failure by the at least one second layer link, the secondary path comprises a third link of the first layer.