A resilient virtual Ethernet ring has nodes interconnected by working and protection paths. If a span fails, the two nodes immediately on either side of the failure are cross-connected to fold the ring. Working-path traffic is cross-connected onto the protection path at the first of the two nodes and is then cross-connected back onto the working path at the second of the two nodes so that traffic always ingresses and egresses the ring from the working path. A traffic originating node, upon determining that transmitted packets are being looped back due to a fault on a primary path, is adapted to switch transmission of data packets from the primary path to a secondary path.