Patent US20030108041A1 successfully refreshed from Google Patents.
← Back to Patent Explorer
US20030108041A1 Expired / Lapsed US ⏱️ 0.0 years remaining

Tunneling scheme optimized for use in virtual private netwoks

Assignee: RPX Clearinghouse LLC
•
Filing: 2001-12-07
•
Granted: —
•
Expires: 2021-12-07
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A tunneling scheme includes the creation of tunnels having a source address and potentially multiple destination addresses. Each tunnel endpoint is divided into two sub-endpoints, where one sub-endpoint has a public network address and the other sub-endpoint has a private network address. Also included in the tunneling scheme is a static Address Resolution Protocol (ARP) table. The static ARP table contains information on virtual private network membership. More particularly, the static ARP table provides address resolution between public network addresses and private network addresses.

Inventors

  • 👤 Can Aysan
  • 👤 Ru Wadasinghe

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-08 18:22
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0272; H04L12/00; H04L12/28; H04L12/46; H04L12/4633; H04L61/00; H04L61/09; H04L61/10

Claims Analysis

Total Claims: 24
Claim 1
Independent Claim 111 words
1 . A method of forwarding a packet to a destination comprising: examining a header of said packet to determine a private destination address; determining a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determining a public address of a public remote sub-endpoint of said tunnel; encapsulating said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forwarding said encapsulated packet to a node in a carrier network.
Claim 2
Dependent Claim 111 words
1 . A method of forwarding a packet to a destination comprising: examining a header of said packet to determine a private destination address; determining a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determining a public address of a public remote sub-endpoint of said tunnel; encapsulating said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forwarding said encapsulated packet to a node in a carrier network.
Claim 3
Dependent Claim 16 words
2 . The method of claim 1 wherein said tunnel is a point to multipoint tunnel.
Claim 4
Dependent Claim 39 words
3 . The method of claim 1 wherein said determining said private address of said first remote sub-endpoint of said tunnel comprises consulting a routing table to discover an address associated with said private destination address of said packet.
Claim 5
Dependent Claim 46 words
4 . The method of claim 6 wherein said determining said public address of said second remote sub-endpoint of said tunnel comprises consulting a static address resolution protocol table to discover an address associated with said private address of said first remote sub-endpoint of said tunnel.
Claim 6
Dependent Claim 21 words
5 . The method of claim 1 further comprising determining a private address of a first local sub-endpoint of said tunnel.
Claim 7
Dependent Claim 43 words
6 . The method of claim 5 wherein said determining said private address of said first local sub-endpoint of said tunnel comprises consulting a forwarding table to discover an address associated with said private address of said first remote sub-endpoint of said tunnel.
Claim 8
Dependent Claim 76 words
7 . A carrier router comprising: a backbone router including: a public network interface for connecting to a public data network; and a sub-endpoint for a tunnel having a network address in an address space of said public data network; and a customer virtual router including: a private network interface for connecting to a private data network; and a sub-endpoint for said tunnel having a network address in an address space of said private data network.
Claim 9
Dependent Claim 76 words
7 . A carrier router comprising: a backbone router including: a public network interface for connecting to a public data network; and a sub-endpoint for a tunnel having a network address in an address space of said public data network; and a customer virtual router including: a private network interface for connecting to a private data network; and a sub-endpoint for said tunnel having a network address in an address space of said private data network.
Claim 10
Dependent Claim 130 words
8 . A carrier router comprising: a private network interface; a public network interface; a processor operable to: receive a packet at said private network interface; examine a header of said packet to determine a private destination address; determine a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determine a public address of a public remote sub-endpoint of said tunnel; encapsulate said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forward said encapsulated packet to a node in a public network via said public network interface.
Claim 11
Dependent Claim 130 words
8 . A carrier router comprising: a private network interface; a public network interface; a processor operable to: receive a packet at said private network interface; examine a header of said packet to determine a private destination address; determine a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determine a public address of a public remote sub-endpoint of said tunnel; encapsulate said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forward said encapsulated packet to a node in a public network via said public network interface.
Claim 12
Dependent Claim 122 words
9 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a carrier router, cause the processor to: examine a header of said packet to determine a private destination address; determine a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determine a public address of a public remote sub-endpoint of said tunnel; encapsulate said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forward said encapsulated packet to a node in a carrier network.
Claim 13
Dependent Claim 122 words
9 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a carrier router, cause the processor to: examine a header of said packet to determine a private destination address; determine a private address of a private remote sub-endpoint of a tunnel, said private sub-endpoint being associated with said private destination address; determine a public address of a public remote sub-endpoint of said tunnel; encapsulate said packet, resulting in an encapsulated packet, to indicate a public address of a public local sub-endpoint of said tunnel as a source address and said public address of said public remote sub-endpoint of said tunnel as a destination address; and forward said encapsulated packet to a node in a carrier network.
Claim 14
Dependent Claim 89 words
10 . A method of receiving a packet, said packet having public source and destination addresses and private source and destination addresses, said method comprising: receiving said packet from a node in a carrier data network; forwarding said packet to a first tunnel sub-endpoint having said public destination address; at said first tunnel sub-endpoint, removing said public source and destination addresses from said packet; forwarding said packet to a second tunnel sub-endpoint; and at said second tunnel sub-endpoint, forwarding said packet to a device having said private destination address.
Claim 15
Dependent Claim 89 words
10 . A method of receiving a packet, said packet having public source and destination addresses and private source and destination addresses, said method comprising: receiving said packet from a node in a carrier data network; forwarding said packet to a first tunnel sub-endpoint having said public destination address; at said first tunnel sub-endpoint, removing said public source and destination addresses from said packet; forwarding said packet to a second tunnel sub-endpoint; and at said second tunnel sub-endpoint, forwarding said packet to a device having said private destination address.
Claim 16
Dependent Claim 87 words
11 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a carrier router, cause the processor to: receive said packet from a node in a carrier data network; forward said packet to a first tunnel sub-endpoint having said public destination address; at said first tunnel sub-endpoint, remove said public source and destination addresses from said packet; forward said packet to a second tunnel sub-endpoint; and at said second tunnel sub-endpoint, forward said packet to a device having said private destination address.
Claim 17
Dependent Claim 87 words
11 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a carrier router, cause the processor to: receive said packet from a node in a carrier data network; forward said packet to a first tunnel sub-endpoint having said public destination address; at said first tunnel sub-endpoint, remove said public source and destination addresses from said packet; forward said packet to a second tunnel sub-endpoint; and at said second tunnel sub-endpoint, forward said packet to a device having said private destination address.
Claim 18
Dependent Claim 123 words
12 . A method of adding a given carrier router to a virtual private network, said virtual private network described by a plurality of tunnel definitions, each of said tunnel definitions defining tunnels between sub-endpoints of existing carrier routers, said method comprising: adding a public network address of a sub-endpoint of said given carrier router as a destination address in each of said plurality of tunnel definitions to create a plurality of amended tunnel definitions; and adding a new tunnel definition where said public network address for said sub-endpoint of said given carrier router is a source address in said new tunnel definition and public network addresses for said sub-endpoints of said existing carrier routers are destination addresses in said new tunnel definition.
Claim 19
Dependent Claim 123 words
12 . A method of adding a given carrier router to a virtual private network, said virtual private network described by a plurality of tunnel definitions, each of said tunnel definitions defining tunnels between sub-endpoints of existing carrier routers, said method comprising: adding a public network address of a sub-endpoint of said given carrier router as a destination address in each of said plurality of tunnel definitions to create a plurality of amended tunnel definitions; and adding a new tunnel definition where said public network address for said sub-endpoint of said given carrier router is a source address in said new tunnel definition and public network addresses for said sub-endpoints of said existing carrier routers are destination addresses in said new tunnel definition.
Claim 20
Dependent Claim 31 words
13 . The method of claim 12 further comprising distributing said plurality of amended tunnel definitions and said new tunnel definition to said existing carrier routers and said given carrier router.
Claim 21
Dependent Claim 76 words
14 . The method of claim 13 , where said sub-endpoint of said given carrier router is a first sub-endpoint and said given carrier router has a second sub-endpoint with a private network address, said method further comprising adding an association of said private network address of said second sub-endpoint to said public network address of said first sub-endpoint to an existing Address Resolution Protocol table to give rise to an amended Address Resolution Protocol table.
Claim 22
Dependent Claim 26 words
15 . The method of claim 14 further comprising distributing said amended Address Resolution Protocol table to said existing carrier routers and said given carrier router.
Claim 23
Dependent Claim 104 words
16 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a network management console, cause the processor to: add a public network address of a sub-endpoint of a given carrier router as a destination address in each of a plurality of tunnel definitions to create a plurality of amended tunnel definitions; and add a new tunnel definition where a public network address for a sub-endpoint of said given carrier router is a source address in said new tunnel definition and public network addresses for sub-endpoints of said existing carrier routers are destination addresses in said new tunnel definition.
Claim 24
Dependent Claim 104 words
16 . A computer readable medium containing computer-executable instructions which, when performed by a processor in a network management console, cause the processor to: add a public network address of a sub-endpoint of a given carrier router as a destination address in each of a plurality of tunnel definitions to create a plurality of amended tunnel definitions; and add a new tunnel definition where a public network address for a sub-endpoint of said given carrier router is a source address in said new tunnel definition and public network addresses for sub-endpoints of said existing carrier routers are destination addresses in said new tunnel definition.

References Cited (Backward Citations)

US6226751B1 Cited
US6636516B1 Cited
US6765591B2 Cited
US6496867B1 Cited
US20020038419A1 Cited

USPTO Annuity & Maintenance Windows

Maintenance schedule is calculated for granted US utility patents.

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag