Methods and structure for automated troubleshooting of a virtual private network connection

• US 20040066747A1
• Filed: 10/02/2002
• Published: 04/08/2004
• Est. Priority Date: 10/02/2002
• Status: Abandoned Application

• Current Assignee: Ben Jorgensen, Christopher E. Marschall, Michael J. Finazzo
• Original Assignee: Ben Jorgensen, Christopher E. Marschall, Michael J. Finazzo
• Inventors: Marschall, Christopher E., Finazzo, Michael J., Jorgensen, Ben
• Application Number:
  US10/262,993
• Publication Number:
  US 20040066747A1
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272

Abstract

Methods and systems for automated diagnosis of problems in a VPN connection by an end user of the VPN connection. The invention provides a method for identifying problems in a virtual private network comprising: automatically performing tests of the virtual private network in response to a request from the end user; automatically identifying a problem indicated by analysis of results of the tests, and communicating the identified problem to the end user. The invention provides for communication with the end user in the form of text messages and/or color-coded icons as well as suggested remedies for the identified problem. The invention thereby reduces the load on help-desk/support personnel in resolving common problems in VPN connections by enabling end user self-help without detailed technical training of the end users.

Claims

1. A method for identifying problems in a virtual private network comprising:

automatically performing tests of said virtual private network in response to a request from an end user;

automatically identifying a problem indicated by results of said tests; and

communicating said problem to said end user.

2. The method of claim 1 wherein the step of communicating said problem includes the step of:

displaying a color-coded icon to indicate the severity of said problem.

3. The method of claim 2 wherein the step of displaying comprises the step of:

displaying a red icon to indicate an error that precludes further testing to identify said problem.

4. The method of claim 2 wherein the step of displaying comprises the step of:

displaying a yellow icon to indicate identification of said problem.

5. The method of claim 2 wherein the step of displaying comprises the step of:

displaying a green icon to indicate the absence of any identified problem.

6. The method of claim 2 wherein the step of displaying comprises the step of:

displaying a traffic light icon wherein said traffic light icon appears with a red light to indicate an error that precludes further testing to identify said problem and wherein said traffic light icon appears with a yellow light to indicate identification of said problem and wherein said traffic light appears with a green light to indicate the absence of any identified problem.

7. The method of claim 1 wherein the step of automatically performing tests comprises the step of running a ping utility.

8. The method of claim 7 wherein the step of running said ping utility comprises the step of pinging a plurality of host systems.

9. The method of claim 8 wherein the step of pinging a plurality of host systems comprises the steps of:

first pinging an internal host system;

determining that said first pinging failed;

second pinging a VPN gateway host system by name in response to the determination that said first pinging failed;

determining that said second pinging failed;

third pinging said VPN gateway host system by IP address in response to the determination that said second pinging failed;

determining that said third pinging failed;

fourth pinging a first public Internet host system by IP address in response to the determination that said third pinging failed;

determining that said fourth pinging failed;

fifth pinging a second public Internet host system by IP address in response to the determination that said fourth pinging failed; and

determining that said fifth pinging failed.

10. The method of claim 9 wherein the step of automatically identifying said problem comprises the step of:

identifying a VPN connectivity problem as said problem in response to failure of said first pinging and success of said second pinging and success of said third pinging and either success of said fourth pinging or success of said fifth pinging.

11. The method of claim 9 wherein the step of automatically identifying said problem comprises the step of:

identifying a VPN gateway connectivity problem as said problem in response to failure of said first pinging and failure of either said second pinging or said third pinging and either success of said fourth pinging or success of said fifth pinging.

12. The method of claim 9 wherein the step of automatically identifying said problem comprises the step of:

identifying an Internet connectivity problem as said problem in response to failure of said first pinging and failure of said second pinging and failure of said third pinging and failure of said fourth pinging and failure of said fifth pinging.

13. A method for diagnosis of a virtual private network connection operable over a TCP/IP connection by an end user comprising:

automatically pinging, responsive to a request by said end user, select host systems over said TCP/IP connection to test said virtual private network connection; and

indicating to said end user a resolution of any identified problem identified by said pinging.

14. The method of claim 13 wherein the step of pinging select host systems comprises the steps of:

pinging an Internet public host system through said TCP/IP; and

identifying an Internet connectivity problem in response to failure of said pinging of said Internet public host system.

15. The method of claim 14 wherein the step of indicating comprises the step of:

displaying a red indicator to said end user to indicate Internet connectivity failure.

16. The method of claim 14 wherein the step of pinging select host systems further comprises the steps of:

responsive to success of said pinging of said Internet public host system, performing the additional steps of;

pinging a VPN gateway host system by IP address through said TCP/IP connection; and

identifying a VPN gateway problem in response failure of said pinging of said VPN gateway host system by IP address.

17. The method of claim 16 wherein the step of indicating comprises the step of:

displaying a yellow indicator to said end user to indicate a VPN gateway failure.

18. The method of claim 16 wherein the step of pinging select host systems further comprises the steps of:

responsive to success of said pinging of said VPN gateway host system by IP address, performing the additional steps of;

pinging said VPN gateway host system by name through said TCP/IP connection; and

identifying a name resolution problem in response failure of said pinging of said VPN gateway host system by name.

19. The method of claim 18 wherein the step of indicating comprises the step of:

displaying a yellow indicator to said end user to indicate a name resolution failure.

20. The method of claim 18 wherein the step of pinging select host systems further comprises the steps of:

responsive to success of said pinging of said VPN gateway host system by name, performing the additional steps of;

pinging an internal host system through said TCP/IP connection; and

identifying a VPN problem in response failure of said pinging of said internal host system.

21. The method of claim 20 wherein the step of indicating comprises the step of:

displaying a yellow indicator to said end user to indicate a VPN failure.

22. The method of claim 20 wherein the step of indicating comprises the step of:

responsive to success of said pinging of said internal host system, performing the additional steps of;

displaying a green indicator to said end user to absence of a virtual private network connection problem.

23. A system for identifying problems in a virtual private network connection on an end user'"'"'s computer, said system comprising:

a TCP/IP network connection from said computer to the Internet wherein said virtual private network connection is operable over said TCP/IP network connection;

a user interface program operable on said end user'"'"'s computer to receive user input requesting diagnosis of said virtual private network connection and for reporting identified problems to said end user;

an automated test program operably coupled to said user interface program and operable in response to a request from said end user to identify said problems in said virtual private network connection on said TCP/IP connection.

24. The system of claim 23 wherein said automated test program comprises:

a diagnostic program operable to communicate with select host systems to identify said problems.

25. The system of claim 24 wherein said diagnostic program comprises:

a ping protocol compliant program to exchange ping packets with said select host systems to identify said problems by said exchange.

26. A system for aiding an end user in identifying problems in a virtual private network connection between the end user'"'"'s computer and a network, said system comprising:

user input means for receiving a request by said end user to diagnose said virtual private network connection;

automated testing means to automatically test said virtual private network connection in response to receipt of said request;

analysis means for identifying problems from results of the automatic testing; and

presentation means for presenting identified problems to said end user.

27. The system of claim 26 wherein the user input means includes:

a keyboard for receiving textual input from said end user.

28. The system of claim 26 wherein the user input means includes:

a pointer device for receiving input from said end user.

29. The system of claim 26 wherein the presentation means includes:

a display for displaying information regarding the identified problems.

30. The system of claim 29 wherein the display includes:

a textual display window for displaying text messages indicative of the identified problems.

31. The system of claim 29 wherein the display includes:

a color-coded icon display area for displaying a graphical icon indicative of the identified problems.

32. The system of claim 31 wherein said color-coded display area is coded green in response to the analysis means identifying no problems and wherein said color-coded display area is coded yellow in response to the analysis means identifying problems in VPN configuration and wherein said color-coded display area is coded red in response to the analysis means identifying problems with Internet connectivity.

33. The system of claim 32 wherein said color-coded display area is a graphical representation of a traffic light.

34. The system of claim 26 further including:

an Internet connection over which said virtual private network connection is operable.

35. The system of claim 34 wherein said automated testing means includes:

means for pinging selected host systems using said Internet connection.

36. The system of claim 35 wherein said means for pinging is operable to ping an Internet public site host system and wherein said analysis means is operable to identify Internet connectivity as the identified problem in response to failure of said ping.

37. The system of claim 35 wherein said means for pinging is operable to ping a VPN gateway host system and wherein said analysis means is operable to identify VPN configuration as the identified problem in response to failure of said ping.

38. The system of claim 35 wherein said means for pinging is operable to ping a VPN gateway host system using the symbolic name of the VPN gateway host system and wherein said analysis means is operable to identify DNS configuration as the identified problem in response to failure of said ping.

39. The system of claim 35 wherein said means for pinging is operable to ping a VPN internal host system and wherein said analysis means is operable to identify VPN configuration as the identified problem in response to failure of said ping.