Method and apparatus for managing a virtual private network

Claim 1

A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising: receiving a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and transmitting the configuration parameters to the virtual private network gateways affected by the command.

Claim 2

A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising: receiving a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and transmitting the configuration parameters to the virtual private network gateways affected by the command.

Claim 14

A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising: receiving, at a virtual private network management station coupled to the public data network, a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying groups of addresses on the public data network between which communications are to be transmitted securely; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; transmitting the configuration parameters securely to the virtual private network gateways affected by the command; and updating a database to reflect changes on the virtual private network caused by the operation specified in the command.

Claim 15

A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising: receiving, at a virtual private network management station coupled to the public data network, a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying groups of addresses on the public data network between which communications are to be transmitted securely; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; transmitting the configuration parameters securely to the virtual private network gateways affected by the command; and updating a database to reflect changes on the virtual private network caused by the operation specified in the command.

Claim 18

An apparatus for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the apparatus comprising: a computer system coupled to the public data network; a user interface within the computer system for receiving a command from a user; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; a command handler in communication with the user interface for handling the command received by the user interface; a translation module in communication with the command handler for translating the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and a communication module in communication with the translation module for communicating the configuration parameters to virtual private network gateways.

Claim 19

An apparatus for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the apparatus comprising: a computer system coupled to the public data network; a user interface within the computer system for receiving a command from a user; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; a command handler in communication with the user interface for handling the command received by the user interface; a translation module in communication with the command handler for translating the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and a communication module in communication with the translation module for communicating the configuration parameters to virtual private network gateways.