US6047325A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Network device for supporting construction of virtual local area networks on arbitrary local and wide area computer networks
Assignee: Individual
•
Filing: 1998-08-24
•
Granted: 2000-04-04
•
Expires: 2018-08-24
Abstract
Abstract A network device that translates addresses of machines on physically separate networks and filters packets at the link, network and transport layers implements a virtual LAN over interconnected computer networks transparent to the computer networks. Using authentication and encryption, a secure connection between these network devices over a public wide area network implements a virtual private network and enables the definition of virtual LANs over the virtual private network. The network device has three tables for network address translation, routing, and filtering. A controller processes each incoming packet by translating network addresses to determine the destination of the packet, routing the packet to the determined location and filtering the packet according to filters defined for traffic between the source destination of the packet. If the packet is to be directed to a wide area network, encryption and authentication procedures can be provided to ensure secure transmission of the packet.
Inventors
- 👤 Lalit Jain
- 👤 Michael T. Ford
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 03:54
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0272; H04L12/00; H04L12/28; H04L12/46; H04L12/4641; H04L61/00; H04L61/09; H04L61/10; H04L61/25; H04L63/04; H04L63/0428
Claims Analysis
Total Claims: 7
Claim 1
Independent Claim
149 words
A network device comprising: a first interface for connection to a first local area network of machines having a link layer, a network layer and a transport layer; a second interface for connection to a second local area network of machines having a link layer, a network layer and a transport layer; wherein the network device has a media access control address on each of the first and second local area networks; a mapping table for mapping network addresses at the network layer of machines on the second local area network to the media access control address of the network device on the first local area network; means for routing packets from machines on the first local area network to machines on the second local area network according to the mapping table; and means for filtering packets using information in the packets from the link, network and transport layers.
Claim 2
Dependent Claim
149 words
A network device comprising: a first interface for connection to a first local area network of machines having a link layer, a network layer and a transport layer; a second interface for connection to a second local area network of machines having a link layer, a network layer and a transport layer; wherein the network device has a media access control address on each of the first and second local area networks; a mapping table for mapping network addresses at the network layer of machines on the second local area network to the media access control address of the network device on the first local area network; means for routing packets from machines on the first local area network to machines on the second local area network according to the mapping table; and means for filtering packets using information in the packets from the link, network and transport layers.
Claim 3
Dependent Claim
74 words
The network device of claim 1, further comprising: a third interface for connection to a wide area network of machines, having a network layer and a transport layer, wherein the network device has an address at the network layer of the wide area network, and wherein the mapping table maps addresses of machines on the wide area network to the media access control address of the network device on the first local area network.
Claim 4
Dependent Claim
41 words
The network device of claim 2, further comprising means, operative when a packet is routed to the wide area network, for performing authentication procedures with another network device and for sending the packet in encrypted form to the other network device.
Claim 5
Dependent Claim
41 words
The network device of claim 3, further comprising means for receiving a packet from the wide area network through the third interface and for routing the received packet to a destination on one of the first and second local area networks.
Claim 6
Dependent Claim
151 words
A process performed by a network device for transferring a packet between a first machine on a first network and a second machine on a second network, comprising the steps of: receiving an address resolution protocol request from the first machine indicating a network layer network address of a desired machine; returning an indication of a link layer network address of the network device if the network layer network address of the desired machine corresponds to a machine on the second local area network; receiving a link layer packet in the having a destination address of the network device, wherein the packet contains a network layer packet having a network layer address of the desired machine; determining the link layer address of the desired machine in the second local area network; and sending a link layer packet encapsulating the network layer packet received by the network device from the first machine.
Claim 7
Dependent Claim
151 words
A process performed by a network device for transferring a packet between a first machine on a first network and a second machine on a second network, comprising the steps of: receiving an address resolution protocol request from the first machine indicating a network layer network address of a desired machine; returning an indication of a link layer network address of the network device if the network layer network address of the desired machine corresponds to a machine on the second local area network; receiving a link layer packet in the having a destination address of the network device, wherein the packet contains a network layer packet having a network layer address of the desired machine; determining the link layer address of the desired machine in the second local area network; and sending a link layer packet encapsulating the network layer packet received by the network device from the first machine.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-04-04 | 2003-10-04 | 2004-04-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-04-04 | 2007-10-04 | 2008-04-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-04-04 | 2011-10-04 | 2012-04-04 | $7700.00 | Window Closed / Lapsed |